)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:43 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x0)
sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:43 executing program 5:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:32:43 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:43 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  370.213147] protocol 88fb is buggy, dev hsr_slave_0
[  370.218468] protocol 88fb is buggy, dev hsr_slave_1
13:32:44 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:44 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x0)
sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:44 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:44 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:44 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:44 executing program 0:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:32:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:44 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:45 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x0)
sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:45 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:45 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:45 executing program 0:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:32:45 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:45 executing program 0:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

[  371.733188] protocol 88fb is buggy, dev hsr_slave_0
[  371.738268] protocol 88fb is buggy, dev hsr_slave_1
13:32:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:45 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:45 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:45 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:45 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:46 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:46 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:46 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  372.853151] protocol 88fb is buggy, dev hsr_slave_0
[  372.858366] protocol 88fb is buggy, dev hsr_slave_1
13:32:47 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:47 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:47 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

[  373.653157] protocol 88fb is buggy, dev hsr_slave_0
[  373.658409] protocol 88fb is buggy, dev hsr_slave_1
13:32:47 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:47 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:47 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:48 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:48 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:48 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:48 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r2})

13:32:49 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:49 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0)

13:32:49 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0)

13:32:49 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:49 executing program 2:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:32:49 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  375.893164] protocol 88fb is buggy, dev hsr_slave_0
[  375.898360] protocol 88fb is buggy, dev hsr_slave_1
13:32:50 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0)

13:32:50 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:50 executing program 2:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:32:50 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:50 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:50 executing program 2:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:32:50 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:50 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100))

13:32:50 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:50 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100))

13:32:51 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(0x0, 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:51 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r2)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r1, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100))

13:32:51 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 3:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, 0x0, 0x0)

13:32:51 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:51 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(0x0, 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:52 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
dup2(r0, r1)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/85, 0x321)

13:32:52 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  378.533188] protocol 88fb is buggy, dev hsr_slave_0
[  378.538331] protocol 88fb is buggy, dev hsr_slave_1
13:32:52 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(0x0, 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:52 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:52 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:53 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  380.053234] protocol 88fb is buggy, dev hsr_slave_0
[  380.058375] protocol 88fb is buggy, dev hsr_slave_1
13:32:53 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:53 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:54 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:54 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  381.013153] protocol 88fb is buggy, dev hsr_slave_0
[  381.018432] protocol 88fb is buggy, dev hsr_slave_1
13:32:54 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:55 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:55 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  381.983203] protocol 88fb is buggy, dev hsr_slave_0
[  381.988342] protocol 88fb is buggy, dev hsr_slave_1
13:32:56 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:56 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  382.613132] protocol 88fb is buggy, dev hsr_slave_0
[  382.618310] protocol 88fb is buggy, dev hsr_slave_1
13:32:56 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:56 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:57 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:57 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  384.053154] protocol 88fb is buggy, dev hsr_slave_0
[  384.058284] protocol 88fb is buggy, dev hsr_slave_1
13:32:58 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:58 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:58 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:58 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

[  384.773176] protocol 88fb is buggy, dev hsr_slave_0
[  384.778336] protocol 88fb is buggy, dev hsr_slave_1
13:32:59 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:59 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:32:59 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:32:59 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:32:59 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:32:59 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:32:59 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:00 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:00 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:00 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:00 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:01 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:01 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  388.373379] protocol 88fb is buggy, dev hsr_slave_0
[  388.378515] protocol 88fb is buggy, dev hsr_slave_1
13:33:02 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:02 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 3:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:33:02 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:02 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:02 executing program 3:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:33:02 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:02 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(0x0, 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:02 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:03 executing program 3:
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r0})

13:33:03 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:03 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:03 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:03 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:04 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:04 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:04 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  390.933128] protocol 88fb is buggy, dev hsr_slave_0
[  390.938363] protocol 88fb is buggy, dev hsr_slave_1
13:33:05 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:05 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:05 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r3, &(0x7f0000d83ff8), 0x2)

[  391.573142] protocol 88fb is buggy, dev hsr_slave_0
[  391.578306] protocol 88fb is buggy, dev hsr_slave_1
13:33:05 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:05 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r3, &(0x7f0000d83ff8), 0x2)

13:33:05 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r3, &(0x7f0000d83ff8), 0x2)

13:33:05 executing program 4:

13:33:05 executing program 4:

13:33:05 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:05 executing program 4:

13:33:06 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:06 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 4:

13:33:06 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:06 executing program 4:

13:33:06 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 4:

13:33:06 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:06 executing program 4:

13:33:06 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 4:

13:33:06 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080), 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:06 executing program 4:

13:33:06 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080))
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 4:

13:33:06 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080), 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:06 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 4:

13:33:06 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:06 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080), 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:06 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 4:

13:33:06 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 4:

13:33:06 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:06 executing program 4:

13:33:07 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  393.093149] protocol 88fb is buggy, dev hsr_slave_0
[  393.098352] protocol 88fb is buggy, dev hsr_slave_1
13:33:07 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{0x0}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:07 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:07 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:07 executing program 4:

13:33:07 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{0x0}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:07 executing program 4:

13:33:07 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:07 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 4:

13:33:07 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{0x0}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:07 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:07 executing program 4:

[  393.493136] protocol 88fb is buggy, dev hsr_slave_0
[  393.498281] protocol 88fb is buggy, dev hsr_slave_1
13:33:07 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 4:

13:33:07 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:07 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:07 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x0, 0x2, r2})
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0)

13:33:07 executing program 5:
perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x858, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
eventfd(0x0)

13:33:07 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:07 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:07 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:07 executing program 4:
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10031, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000fc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)

13:33:07 executing program 5:

13:33:08 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000140, 0x0, 0x0, 0x20000170, 0x200003b0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x64, 0xfbff, 'tunl0\x00', 'hwsim0\x00', 'vcan0\x00', 'ipddp0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xb0, 0xb0, 0xe8, [@statistic={'statistic\x00', 0x18, {{0x1, 0x1, 0x9, 0x6, 0x193e1ef1, 0x5}}}]}}, @common=@dnat={'dnat\x00', 0x10, {{@random="bf5151122f73", 0xffffffffffffffff}}}}, {{{0x11, 0x0, 0x0, 'nr0\x00', 'gretap0\x00', 'ipddp0\x00', 'bond_slave_1\x00', @broadcast, [], @broadcast, [], 0x70, 0xa8, 0xf0}, [@arpreply={'arpreply\x00', 0x10, {{@remote}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0xcbf}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x2e0)

13:33:08 executing program 2:

13:33:08 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:08 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000380)=0x80, 0x4)
ppoll(&(0x7f0000008380)=[{r0}], 0x1, 0x0, &(0x7f0000008440)={0x8}, 0x8)

13:33:08 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

[  394.519818] kernel msg: ebtables bug: please report to author: Valid hook without chain
13:33:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4000000000000bd, 0x0)

13:33:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./file0\x00', 0x0)

[  394.612809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  394.613169] protocol 88fb is buggy, dev hsr_slave_0
[  394.635706] protocol 88fb is buggy, dev hsr_slave_1
13:33:08 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  395.158757] kauditd_printk_skb: 14 callbacks suppressed
[  395.158770] audit: type=1804 audit(1550928789.001:55): pid=13791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir760385154/syzkaller.t3I3xy/304/file0/file0" dev="loop2" ino=3 res=1
13:33:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:10 executing program 4:
r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'})
write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd)
keyctl$clear(0x7, 0x0)

13:33:10 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:10 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:10 executing program 5:
r0 = socket$kcm(0xa, 0x4020122000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x40000000, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7a8a295b90bf9cc85a2b1496c0c48000402080a2f858ad2c4aa412d", 0x48}], 0x1}, 0x0)

13:33:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fallocate(r1, 0x1, 0x0, 0x369e5d84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000680)='./file0\x00', 0x0)

13:33:10 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb0100180000000000000044003ee520b91c726a00005c"], 0x0, 0x18, 0x0, 0x1}, 0x20)

13:33:11 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

13:33:11 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/')
sendfile(r0, r1, 0x0, 0x40001)

13:33:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:11 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000)

13:33:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0)
clone(0x4002102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000100))

13:33:13 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:13 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:13 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0))

13:33:14 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005540)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @ioapic})

13:33:14 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:14 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000000000004, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x80000000000000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clock_settime(0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_create(0x400000b, 0x0)
r1 = open(0x0, 0x0, 0x1)
write$FUSE_IOCTL(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8)
fstat(r1, 0x0)
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in=@empty, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000056c0)=0xe8)
fcntl$getown(0xffffffffffffffff, 0x9)
lstat(&(0x7f0000006fc0)='./file0\x00', &(0x7f0000007000))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x307, {0x100, 0x0, 0x0, 0x0, 0x6}}, 0xe)
shmget(0x1, 0x1000, 0x78000010, &(0x7f0000fff000/0x1000)=nil)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @empty}, {0x2, 0x0, @rand_addr=0x100000000}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000071c0))
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$TCXONC(r0, 0x540a, 0x5)

13:33:14 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000240))
clone(0x0, 0x0, 0x0, 0x0, 0x0)
timer_delete(0x0)

13:33:14 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:16 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x200000000000001, 0x0)
bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
write(r0, &(0x7f0000000740), 0xfffffcdd)
close(r1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

13:33:16 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000000000004, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x80000000000000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
clock_settime(0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_create(0x400000b, 0x0)
r1 = open(0x0, 0x0, 0x1)
write$FUSE_IOCTL(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@dev, @in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8)
fstat(r1, 0x0)
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400))
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in=@empty, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000056c0)=0xe8)
fcntl$getown(0xffffffffffffffff, 0x9)
lstat(&(0x7f0000006fc0)='./file0\x00', &(0x7f0000007000))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x307, {0x100, 0x0, 0x0, 0x0, 0x6}}, 0xe)
shmget(0x1, 0x1000, 0x78000010, &(0x7f0000fff000/0x1000)=nil)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @empty}, {0x2, 0x0, @rand_addr=0x100000000}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000071c0))
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$TCXONC(r0, 0x540a, 0x5)

13:33:16 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:16 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:17 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cc, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0)

13:33:17 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:17 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:17 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4)

13:33:17 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='projid_map\x00')
write$tun(r0, 0x0, 0x0)

13:33:17 executing program 4:
syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x6, 0x6002)

[  403.413155] protocol 88fb is buggy, dev hsr_slave_0
13:33:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:19 executing program 5:
clone(0x0, 0x0, 0x0, 0x0, 0x0)
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

13:33:19 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:19 executing program 4:
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x147a01)

13:33:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:19 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:20 executing program 4:

13:33:20 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:20 executing program 5:

13:33:20 executing program 4:

13:33:20 executing program 4:

13:33:20 executing program 5:

13:33:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:20 executing program 5:

13:33:20 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:20 executing program 4:

13:33:20 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

13:33:20 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:20 executing program 4:

13:33:20 executing program 5:

13:33:20 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:20 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:20 executing program 5:

13:33:20 executing program 4:

13:33:20 executing program 5:

13:33:21 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:21 executing program 4:

13:33:21 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:21 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

13:33:21 executing program 5:

13:33:21 executing program 4:

13:33:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:21 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:21 executing program 5:

13:33:21 executing program 4:

13:33:21 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x0, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:21 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:21 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:21 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

13:33:22 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:22 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:22 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:22 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:22 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:22 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:22 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:22 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:22 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:23 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:23 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:23 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:23 executing program 5:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:23 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:23 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:23 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, 0x0, 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:23 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:23 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:24 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:24 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))

13:33:24 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:24 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:24 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, 0x0, 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:24 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:24 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:25 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:25 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))

13:33:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:25 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:25 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, 0x0, 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[  411.813153] protocol 88fb is buggy, dev hsr_slave_0
[  411.818416] protocol 88fb is buggy, dev hsr_slave_1
13:33:25 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:25 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:25 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1000000003c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803)

[  412.213171] protocol 88fb is buggy, dev hsr_slave_0
[  412.218335] protocol 88fb is buggy, dev hsr_slave_1
13:33:26 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:26 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1000000003c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803)

[  412.373174] protocol 88fb is buggy, dev hsr_slave_0
[  412.378342] protocol 88fb is buggy, dev hsr_slave_1
13:33:26 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[], 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1000000003c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803)

13:33:26 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:26 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:26 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:26 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:27 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = dup2(r0, 0xffffffffffffffff)
read(r1, &(0x7f00000000c0)=""/85, 0x321)

13:33:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:27 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:27 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[], 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:27 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

[  413.333164] protocol 88fb is buggy, dev hsr_slave_0
[  413.338304] protocol 88fb is buggy, dev hsr_slave_1
13:33:27 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
read(r0, &(0x7f0000000340)=""/255, 0xff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:27 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:27 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:27 executing program 0:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1000000003c)
fcntl$setstatus(r0, 0x4, 0x42803)

13:33:27 executing program 0:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1000000003c)
fcntl$setstatus(r0, 0x4, 0x42803)

13:33:27 executing program 0:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1000000003c)
fcntl$setstatus(r0, 0x4, 0x42803)

13:33:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:27 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:28 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[], 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:28 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:28 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:28 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0)

13:33:28 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/85, 0x321)

13:33:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:28 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:28 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:28 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/85, 0x321)

13:33:28 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:29 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:29 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/85, 0x321)

13:33:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:29 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:29 executing program 5:
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:29 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:29 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100))

13:33:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

[  415.973198] protocol 88fb is buggy, dev hsr_slave_0
[  415.978306] protocol 88fb is buggy, dev hsr_slave_1
13:33:30 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:30 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:30 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:30 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:30 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:30 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:30 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:31 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:31 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:31 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:31 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:31 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5"], 0x19)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:31 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:31 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:31 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(0xffffffffffffffff, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:31 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r2 = dup2(r0, r1)
read(r2, &(0x7f00000000c0)=""/85, 0x321)

13:33:31 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:31 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

[  417.853770] cgroup: fork rejected by pids controller in /syz0
13:33:32 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5"], 0x19)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(0xffffffffffffffff, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:32 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:32 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:32 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(0xffffffffffffffff, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:32 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:32 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:32 executing program 5:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:32 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:33 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:33 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:33 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:33 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

[  419.833980] device bridge_slave_1 left promiscuous mode
[  419.839505] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.924062] device bridge_slave_0 left promiscuous mode
[  419.929668] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.105818] device hsr_slave_1 left promiscuous mode
[  420.168499] device hsr_slave_0 left promiscuous mode
[  420.208166] team0 (unregistering): Port device team_slave_1 removed
[  420.225180] team0 (unregistering): Port device team_slave_0 removed
[  420.236686] bond0 (unregistering): Releasing backup interface bond_slave_1
[  420.289369] bond0 (unregistering): Releasing backup interface bond_slave_0
[  420.373672] bond0 (unregistering): Released all slaves
[  421.229477] IPVS: ftp: loaded support on port[0] = 21
[  421.321543] chnl_net:caif_netlink_parms(): no params data found
[  421.354992] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.361579] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.368801] device bridge_slave_0 entered promiscuous mode
[  421.375865] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.382263] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.389256] device bridge_slave_1 entered promiscuous mode
[  421.406046] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  421.416402] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  421.434260] team0: Port device team_slave_0 added
[  421.440428] team0: Port device team_slave_1 added
[  421.514758] device hsr_slave_0 entered promiscuous mode
[  421.583510] device hsr_slave_1 entered promiscuous mode
[  421.685159] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.700520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  421.707521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  421.716676] 8021q: adding VLAN 0 to HW filter on device team0
[  421.724618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  421.732295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  421.740297] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.746659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.754500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  421.763513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  421.771208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  421.779190] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.785556] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.795711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  421.804960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  421.820222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  421.830109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  421.840775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  421.848856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  421.857672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  421.865276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  421.872677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
13:33:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

13:33:35 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:35 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

[  421.880113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  421.887933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  421.895487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  421.902863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  421.909929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  421.923370] 8021q: adding VLAN 0 to HW filter on device batadv0
13:33:35 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
socket(0x1e, 0x0, 0xfffffffffffffffa)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:35 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:35 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:36 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
socket(0x1e, 0x0, 0xfffffffffffffffa)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:36 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:36 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
socket(0x1e, 0x0, 0xfffffffffffffffa)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:36 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:36 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
socket(0x1e, 0x0, 0xfffffffffffffffa)
r2 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r4 = dup2(r2, r3)
read(r4, &(0x7f00000000c0)=""/85, 0x321)

13:33:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:36 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f"], 0xd)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:36 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)

13:33:36 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:36 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:37 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:37 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f"], 0xd)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:37 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x504)

13:33:37 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)

13:33:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:37 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

[  424.120108] device nr0
 entered promiscuous mode
13:33:38 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:38 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
r3 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r5 = dup2(r3, r4)
read(r5, &(0x7f00000000c0)=""/85, 0x321)

13:33:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:38 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f"], 0xd)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:38 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x504)

13:33:38 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)

13:33:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:38 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000))
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:39 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:39 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x504)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000))
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000))
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

[  425.631286] device nr0
 entered promiscuous mode
13:33:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:39 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:39 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:39 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:39 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

13:33:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

13:33:39 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

13:33:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

13:33:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

13:33:40 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x0)

13:33:40 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r5 = dup2(0xffffffffffffffff, r4)
read(r5, &(0x7f00000000c0)=""/85, 0x321)

13:33:40 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:40 executing program 2:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x504)

13:33:40 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:40 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

[  426.914535] device nr0
 entered promiscuous mode
13:33:41 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
mq_getsetattr(r3, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:41 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c"], 0x7)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:41 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:41 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:41 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1, &(0x7f0000001a40)}, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x504)

[  427.842258] device nr0
 entered promiscuous mode
13:33:43 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:43 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:43 executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:43 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c"], 0x7)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:43 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:43 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:43 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:43 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:43 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:43 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:44 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:44 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:46 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c"], 0x7)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:46 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:47 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:47 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:47 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:49 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:49 executing program 2:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1, &(0x7f0000001a40)}, 0x0)
openat$cgroup_int(r0, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x504)

13:33:50 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:50 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1, &(0x7f0000001a40)}, 0x0)
openat$cgroup_int(r0, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x504)

[  436.351655] device nr0
 entered promiscuous mode
13:33:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:50 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:50 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

[  436.697491] device nr0
 entered promiscuous mode
13:33:50 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:50 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:50 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:51 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:51 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:51 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:51 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:51 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:52 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:53 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x10)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440)="483d7f", 0x3, 0xfffffffffffffff8)
keyctl$revoke(0x3, r6)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:53 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:53 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:53 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1, &(0x7f0000001a40)}, 0x0)
openat$cgroup_int(r0, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00', 0x2761, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x504)

13:33:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

[  440.260348] device nr0
 entered promiscuous mode
13:33:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:54 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
r5 = dup2(r4, 0xffffffffffffffff)
read(r5, &(0x7f00000000c0)=""/85, 0x321)

13:33:54 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:54 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
r5 = dup2(r4, 0xffffffffffffffff)
read(r5, &(0x7f00000000c0)=""/85, 0x321)

13:33:54 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:54 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:33:54 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:54 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:54 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:54 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:54 executing program 2:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:54 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:54 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae55, 0xc0000)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x410, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48081)
r2 = socket(0x1e, 0x0, 0xfffffffffffffffa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIGETBSZ(r2, 0x2, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x0)
r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2})
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8040, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0)
r6 = dup2(r4, r5)
read(r6, &(0x7f00000000c0)=""/85, 0x321)

13:33:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(0x0, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:55 executing program 3:
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1, &(0x7f0000001a40)}, 0x0)
openat$cgroup_int(r0, &(0x7f00000004c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00', 0x2761, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xee, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x504)

13:33:55 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

[  441.419709] device nr0
 entered promiscuous mode
13:33:55 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ff"], 0x1)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(0x0, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:55 executing program 3 (fault-call:6 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:55 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:33:55 executing program 2 (fault-call:9 fault-nth:0):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x2, 0x2)

13:33:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5409, 0x2)

13:33:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(0x0, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:55 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

13:33:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540a, 0x2)

13:33:56 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:56 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a4"], 0x3)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540c, 0x2)

13:33:56 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000000100)={0x0, r1})

13:33:56 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x0)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540d, 0x2)

13:33:56 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5411, 0x2)

13:33:56 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x5421, &(0x7f0000000100)={0x0, r1})

13:33:56 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:56 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5412, 0x2)

13:33:57 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a4"], 0x3)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:57 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x0)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:57 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x5450, &(0x7f0000000100)={0x0, r1})

13:33:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5413, 0x2)

13:33:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5414, 0x2)

[  443.413181] protocol 88fb is buggy, dev hsr_slave_0
[  443.418288] protocol 88fb is buggy, dev hsr_slave_1
13:33:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5415, 0x2)

13:33:57 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:57 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x5451, &(0x7f0000000100)={0x0, r1})

13:33:57 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5416, 0x2)

13:33:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x0)
fcntl$setstatus(r1, 0x4, 0x42803)

13:33:58 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a4"], 0x3)
mq_getsetattr(r2, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5418, 0x2)

13:33:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803)

13:33:58 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x5452, &(0x7f0000000100)={0x0, r1})

13:33:58 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x541b, 0x2)

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x541d, 0x2)

13:33:58 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x5460, &(0x7f0000000100)={0x0, r1})

13:33:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803)

13:33:58 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
close(r2)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:33:58 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x541e, 0x2)

13:33:58 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x541f, 0x2)

13:33:58 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, &(0x7f0000000100)={0x0, r1})

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5421, 0x2)

13:33:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5423, 0x2)

[  445.093210] protocol 88fb is buggy, dev hsr_slave_0
[  445.098315] protocol 88fb is buggy, dev hsr_slave_1
13:33:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5424, 0x2)

13:33:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5425, 0x2)

[  445.173136] protocol 88fb is buggy, dev hsr_slave_0
[  445.178256] protocol 88fb is buggy, dev hsr_slave_1
13:33:59 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000000100)={0x0, r1})

13:34:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42803)

13:34:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5427, 0x2)

13:34:01 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
close(0xffffffffffffffff)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

13:34:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x40049409, &(0x7f0000000100)={0x0, r1})

13:34:01 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:01 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000680)={0x100000001, 0x5, 0x7fff, 0x243, 0xfffffffffffffffc, 0x9, 0x400, 0x8}, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5428, 0x2)

13:34:01 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5437, 0x2)

13:34:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af00, &(0x7f0000000100)={0x0, r1})

13:34:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x0)

13:34:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5441, 0x2)

13:34:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5450, 0x2)

13:34:01 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af25, &(0x7f0000000100)={0x0, r1})

13:34:02 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
close(0xffffffffffffffff)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

13:34:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5451, 0x2)

13:34:02 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4020940d, &(0x7f0000000100)={0x0, r1})

13:34:02 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5452, 0x2)

13:34:02 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x545d, 0x2)

[  448.533270] protocol 88fb is buggy, dev hsr_slave_0
[  448.538518] protocol 88fb is buggy, dev hsr_slave_1
13:34:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x5460, 0x2)

13:34:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x0)

13:34:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x40049409, 0x2)

13:34:04 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f0000000100)={0x0, r1})

13:34:04 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:04 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
close(0xffffffffffffffff)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

13:34:04 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000006c0))
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x4020940d, 0x2)

13:34:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x80045432, 0x2)

13:34:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x80045440, 0x2)

13:34:04 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000000100)={0x0, r1})

13:34:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0xc0045878, 0x2)

13:34:05 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0xc0045878, 0x2)

13:34:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x10002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f00000003c0), 0x18c)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1000000003c)
fcntl$setstatus(r1, 0x4, 0x0)

13:34:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0xc0189436, 0x2)

13:34:07 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0045878, &(0x7f0000000100)={0x0, r1})

13:34:07 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:07 executing program 4:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:07 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0xc020660b, 0x2)

[  453.973205] protocol 88fb is buggy, dev hsr_slave_0
[  453.978433] protocol 88fb is buggy, dev hsr_slave_1
13:34:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={<r2=>r1})
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x200, 0x4)

13:34:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101002, 0x0)
bind$netrom(r4, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
prctl$PR_SET_PDEATHSIG(0x1, 0x1d)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:08 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0045878, &(0x7f0000000100)={0x0, r1})

13:34:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000)
r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8000, 0x109000)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x88)

13:34:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0)
accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10, 0x80000)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:10 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0189436, &(0x7f0000000100)={0x0, r1})

13:34:10 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x1})
syz_emit_ethernet(0x1e, &(0x7f0000000080)={@random="7ea389b44e84", @link_local, [], {@can={0xc, {{0x2, 0x6, 0x1c7a, 0x5}, 0x1, 0x1, 0x0, 0x0, "c88dd9f0c236c8fc"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xa6d, 0x104, 0x7c1, 0x11e]})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)

13:34:10 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:10 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:10 executing program 4:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:10 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200000, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x201)
ioctl$TCFLSH(r3, 0x540b, 0x2)
r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x8200)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x2, 0x3}, 0x10)

13:34:10 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:11 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xc020660b, &(0x7f0000000100)={0x0, r1})

13:34:11 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = fcntl$dupfd(r0, 0x406, r1)
setsockopt$inet_dccp_int(r2, 0x21, 0x5, &(0x7f0000000080)=0x3, 0x4)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r2, 0x408401)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x2e99)

13:34:11 executing program 4:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x2e99)

13:34:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x7, 0x2, 0x80000000})

13:34:11 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:11 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

13:34:11 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3, r1})

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendfile(r2, r1, 0x0, 0x2e99)

13:34:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
getsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000180)=""/226, &(0x7f0000000080)=0xe2)

13:34:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x4)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(0xffffffffffffffff, r1, 0x0, 0x2e99)

13:34:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(0xffffffffffffffff, r1, 0x0, 0x2e99)

13:34:12 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)='vmnet0\x00', 0x7)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000100))
r3 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2)

[  458.133169] protocol 88fb is buggy, dev hsr_slave_0
[  458.138332] protocol 88fb is buggy, dev hsr_slave_1
13:34:12 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x20000)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(0xffffffffffffffff, r1, 0x0, 0x2e99)

13:34:12 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x300, r1})

13:34:12 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:12 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

13:34:12 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, 0xffffffffffffffff, 0x0, 0x2e99)

13:34:12 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_tcp(&(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x80000, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@afid={'afid', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '/dev/ptmx\x00'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@nodevmap='nodevmap'}, {@uname={'uname', 0x3d, 'system&'}}, {@nodevmap='nodevmap'}, {@access_uid={'access', 0x3d, r2}}, {@debug={'debug', 0x3d, 0x40}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio='permit_directio'}]}})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2000400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x200000095bb)
r5 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x2)
r6 = gettid()
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r6)

13:34:12 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1000000, r1})

13:34:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, 0xffffffffffffffff, 0x0, 0x2e99)

13:34:12 executing program 3:
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)
semget(0x3, 0x1, 0x4)
ioctl$TCFLSH(r0, 0x540b, 0x2)

13:34:12 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, 0xffffffffffffffff, 0x0, 0x2e99)

13:34:12 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:12 executing program 3:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80000, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000100)})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000))
r3 = syz_open_pts(r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x81, 0x1}, {0x5, 0x9}, 0x40, 0x7, 0x7fffffff})
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:12 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:13 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:13 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:34:13 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x3000000, r1})

13:34:13 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:13 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/129)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x9})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r1, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x10000000002)

13:34:13 executing program 4:
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:13 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:13 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:13 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x209a300}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x19c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @remote, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe425}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49900000}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x410cd81b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x2)
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x3, 0x3, 0x20, 0x6, 0x4, 0xffffffffffff8000, 0x1, 0x4], 0x9, 0x7, 0x100000001, 0x3554, 0x100000000, 0x4, {0x2, 0x7f, 0x1390000, 0xfffffffffffffffd, 0x7fffffff, 0x13, 0x22, 0x6, 0x10001, 0x6, 0x3, 0x6, 0x4, 0xe0c, "a25db03729f57f0fdf76b5a456a2ac8828877cafc53e9d16a99244ea28ef966d"}})

13:34:13 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:13 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:13 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000540, r1})

13:34:13 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:14 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:34:14 executing program 0:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x6, 0x11, 0x80000001, 0x3})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r2, 0x22000)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:14 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:14 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000541, r1})

13:34:14 executing program 4:
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:14 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x8400, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={<r3=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x6}, 0x8)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0xffffffff, 0xd9f3, 0x0, 0x10000000, 0x6, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc, 0x10000000000000})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0)
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000080)=0x1038)
r5 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x104)

13:34:14 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

13:34:14 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000542, r1})

13:34:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0x7, 0x40, 0x101, 0x6, 0x5, 0x1, 0x100000000, 0x3c0c, 0x3ff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:14 executing program 0:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r1, r0, 0x0, 0x2e99)

[  461.023153] protocol 88fb is buggy, dev hsr_slave_0
13:34:15 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x2)

13:34:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x800, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={<r3=>0x0, 0x2, 0x9010, 0xfffffffffffffff8}, &(0x7f0000000400)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000440)={r3, @in={{0x2, 0x4e20, @multicast2}}, 0x59, 0x5}, &(0x7f0000000500)=0x90)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r4, 0x540b, 0x2)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0)
fcntl$dupfd(r2, 0x0, r1)
syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000280)='./file0\x00', 0x3, 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)="f2d57594acdffb3e35fe171d26e545c7acc111878eabfa492cd171dea16d51bd659914f027984238befa41557991b1d04a5a08ab7fc428a73565a0fc9b9ad356d59b9dc1", 0x44, 0x80}], 0x40000, &(0x7f0000000380)={[{@noacl='noacl'}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]})
getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={<r6=>0x0, 0xffffffffffff1354}, &(0x7f00000003c0)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000180)={r6, @in={{0x2, 0x4e22, @local}}}, 0x84)

13:34:15 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:15 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x20000543, r1})

13:34:15 executing program 4:
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = dup(r0)
setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000180)="7db355cb5ca1a3c0a15cc4990b9fcc17fb765fb7169eb5cb100e907c84cac6c89b6d844a08a6371be053515b0c5524df85691edb6900a459e493ef53f0de10f053e612b37ae8a24bba998d952183d628abb226b3e540d3b35b4c4652e0ecd46b2c79c98f245f3422f28c70722f413d786da42bf6cddeb752a0253f487ce96470c93ce048240356a80a52ffca924a15130fb33e22b31513aa963ea1ce1fbe8fae80e3617517e142e3f0f4d02bd2304314b3c91f225aa2b25af4682c418c71fe25706461dd11342e07ca8ee8fac3bb39", 0xcf)
ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000040)={0x3, 0x80, 0x2})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000280)=""/2)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000100)=0x1e)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

[  461.653150] protocol 88fb is buggy, dev hsr_slave_0
[  461.658356] protocol 88fb is buggy, dev hsr_slave_1
13:34:15 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x40050020, r1})

13:34:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x420240, 0x0)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000001500)=<r4=>0x0)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000001540)=r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/107, 0x6b}, {&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000001380)=""/229, 0xe5}], 0x7, 0x0)
r5 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x2)

[  461.813158] protocol 88fb is buggy, dev hsr_slave_0
[  461.818295] protocol 88fb is buggy, dev hsr_slave_1
13:34:16 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x2)

13:34:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:16 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0)

13:34:16 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x41050020, r1})

13:34:16 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000640))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:16 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:16 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
readahead(r1, 0x80, 0x6)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x8000)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:16 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r5, &(0x7f0000d83ff8), 0x2)

13:34:16 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f00000000c0)=0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0x5}, 0x4)

13:34:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:17 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x2)

13:34:17 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x42050020, r1})

13:34:17 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x5, 0x20000)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0))
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TCXONC(r0, 0x540a, 0x6)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
ioctl$TCFLSH(r3, 0x540b, 0x2)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='veth0_to_bridge\x00'})

13:34:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:17 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000640))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:17 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:17 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x11c5, 0x4000)
bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @rand_addr=0xdd}}, 0x1e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x7f)
r3 = geteuid()
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x8, &(0x7f0000000500)=[{&(0x7f00000001c0)="c7decc4d10d7a8fac0400a1aea744b0bb45aa50e6017e8be155bccc5d3249b5dbb09a5ad9b0078", 0x27, 0x400}, {&(0x7f0000000200)="8f718c584d61fd10eb1c981556c50bacb6fb43779c7ff95ec65cebab1c431e36da2f590a1131d0d28fe439c37b33307ab46f43ada32757d784b00c56de86580c9d67b58fec0299fbdd45c0e03c981975ea7b7e588c5c5f321bae61922b378bd8f6477abcbb18f9e11f38ab48f15c67365e34524d3c0cfdb108f3b2329574bba98ebcc2af97e2a7130e3e4cb6b34718bc46", 0x91, 0x2}, {&(0x7f00000002c0)="7ef5232a3814a7250d2f6d0c84404ed98a9fbb3a692026e3ba901a6b9a8a9a8148c5a3744a727faf135883017740e55fd085d0ec2d4f175ec90b70d5ae9ca584fc9bec141e895efa05d913fa54db6591f583fc43dbb9a6f6b5ed4ae24b04cf1f8517e98f926eff2e8fc03acf900aa99dd5e1e0a6cded6d199ee512f7036df71845d1", 0x82, 0xfff}, {&(0x7f0000000380)="a53f8986c90248c0c285b50537259506484b44ebd2ee516cac0c61446279866b79", 0x21, 0xfff}, {&(0x7f00000003c0)="f9", 0x1, 0x1}, {&(0x7f0000000400)="30de6f0723114f2edfcab1c9131f", 0xe, 0xd87}, {&(0x7f0000000440)="455e905d980b30ca0ed27b169c", 0xd, 0x100}, {&(0x7f0000000480)="96841429f398099d1d1ec71ab8e58de4f54164e07fca9b5e660a562a3afbebe900ca9b3f04003007d0fe5774b7269ecb6cd8ca6501fd676cf079cb75f5341acb1c0540ad47a6efebb62a7117128ecd731c1adcf46a4ac0ab60be9e02f14641a331f1d21ebec263377f", 0x69, 0xfff}], 0x10, &(0x7f00000005c0)={[{@block_validity='block_validity'}], [{@euid_lt={'euid<', r3}}, {@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}]})

13:34:17 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:34:17 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x43050020, r1})

13:34:17 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

[  463.715512] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  463.733205] protocol 88fb is buggy, dev hsr_slave_0
[  463.738359] protocol 88fb is buggy, dev hsr_slave_1
[  463.813227] protocol 88fb is buggy, dev hsr_slave_0
[  463.818367] protocol 88fb is buggy, dev hsr_slave_1
13:34:18 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x2)

13:34:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:18 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0x6, 0x0, 0x16e, 0x7, 0x200, 0xc7, 0x4, 0x9]})

13:34:18 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0xfdfdffff, r1})

13:34:18 executing program 4:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
fcntl$setownex(r0, 0xf, &(0x7f0000000640))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x2)

13:34:18 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x20080)
r3 = syz_open_pts(r0, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2301, 0x400000)
write$P9_RREMOVE(r4, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

[  464.373178] protocol 88fb is buggy, dev hsr_slave_0
13:34:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:18 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:34:18 executing program 4:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:18 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="4c26885b97d2c7398944072511bd55422cdc620c14167977c8d9acc739a6ddfe4eab8f1e985450cccba77f80e20e6b28cb0b695d2a5897e855dade24a1806fe84beae8f4b9a7f3600ee37879c905503e65ddc877a7dcadef6a2f528817174ba8add0d64ebfa7eec311237a76850c32dd960f2a294da70cf82e3925869a34348e2f2eeeb83fceb2ca45fb461924b87112cc715269b59432b4ee28d3")
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

13:34:18 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0xfffffdfd, r1})

13:34:18 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x0)

13:34:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b0")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:18 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:18 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
connect$inet6(r2, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(r2)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x2)

13:34:18 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x100000000000000, r1})

13:34:19 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x3ff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)

13:34:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b0")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:19 executing program 4:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000640))
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
close(r0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x2)

13:34:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b0")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:19 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r2 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={<r4=>0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x1, 0xddb, 0xfff, 0x4}, &(0x7f00000000c0)=0x98)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e21, @rand_addr=0x7}}}, &(0x7f0000000100)=0x84)

13:34:19 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400040, 0x0)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000180)={0x5, 0x2, [{0x7ff}, {0x7, 0x0, 0xfffffffffffffff9}, {0x200, 0x0, 0x4}, {0x1, 0x0, 0x97c}, {0x6, 0x0, 0x1fa6}]})
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x80000, 0x0)

13:34:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:19 executing program 1:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20}, 0xc)
fcntl$setownex(r0, 0xf, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0)
close(r1)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x10)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000440), 0x0, 0xfffffffffffffff8)
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a401"], 0x4)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x0)

13:34:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070")
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd<J\x90\f\x82\xe8d9\xdb\x96\xee\xe1OzH\xc3\xcfu\xedc\x83\xe1?U\xe8\xcb>\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4')
sendfile(r2, r1, 0x0, 0x2e99)

13:34:19 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/mixer\x00', 0x4000, 0x0)
getsockname$netlink(r2, &(0x7f0000002e00), &(0x7f0000002e40)=0xc)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x20081)
r3 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x2)

13:34:19 executing program 5:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x20, 0x8}, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r1=>0x0}, &(0x7f00000004c0)=0xc)
fcntl$setownex(r0, 0xf, &(0x7f0000000640)={0x0, r1})
r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x4e20, 0x1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{0x0, 0x2, 0xb, 0x0, 0x7, 0x401, 0xdc, 0x7, 0x81, 0x6, 0x9, 0x9}, {0xf002, 0x14001, 0x3, 0x4, 0xf2, 0x7, 0x3, 0x7, 0x8f5, 0x9, 0x8, 0xfff}, {0x6000, 0x0, 0x3, 0x80000000, 0xfd, 0x0, 0x741, 0x3a9, 0xffffffffffff8001, 0x6, 0x889, 0x5}, {0x0, 0x7000, 0x0, 0x8, 0x0, 0x0, 0x1400000000000, 0x7, 0x6, 0xffffffffffffff81, 0x0, 0x100000001}, {0xf000, 0x2, 0xf, 0x1, 0x3f, 0x6, 0xff, 0x7, 0x7000eaf9, 0x0, 0x1010000000000000, 0x8}, {0x4, 0x0, 0xc, 0x2, 0x3f, 0x0, 0x3, 0x3, 0x3ff, 0x0, 0x101, 0x800}, {0x2000, 0x3004, 0x0, 0x3, 0x6, 0x0, 0x7, 0x8, 0x0, 0xb8, 0x6, 0x3}, {0x0, 0xf000, 0xa, 0x1, 0x8, 0x5, 0x0, 0x2, 0x0, 0x4, 0x8, 0x8}, {0xf002, 0x10f000}, {0x10000, 0x4}, 0x1, 0x0, 0x0, 0x0, 0xe, 0x8000, 0xf000, [0x7fffffff, 0xf2e, 0x5, 0xcd55]})
close(0xffffffffffffffff)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x6)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
keyctl$revoke(0x3, 0x0)
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="ffc0a40105d18c0f9c9d9a5d0f918678244fb751d20de882c5ce563a98c95e233e523d13a0e6fce18423c5d7e8617edf7b"], 0x31)
sendfile(0xffffffffffffffff, r4, &(0x7f0000d83ff8), 0x2)

[  466.293156] net_ratelimit: 7 callbacks suppressed
[  466.293164] protocol 88fb is buggy, dev hsr_slave_0
[  466.303181] protocol 88fb is buggy, dev hsr_slave_1
[  466.453166] protocol 88fb is buggy, dev hsr_slave_0
[  466.458400] protocol 88fb is buggy, dev hsr_slave_1
[  467.253166] protocol 88fb is buggy, dev hsr_slave_0
[  467.258468] protocol 88fb is buggy, dev hsr_slave_1
[  467.893133] protocol 88fb is buggy, dev hsr_slave_0
[  467.898358] protocol 88fb is buggy, dev hsr_slave_1
[  467.973167] protocol 88fb is buggy, dev hsr_slave_0
[  467.978364] protocol 88fb is buggy, dev hsr_slave_1
[  471.413161] net_ratelimit: 18 callbacks suppressed
[  471.413168] protocol 88fb is buggy, dev hsr_slave_0
[  471.423342] protocol 88fb is buggy, dev hsr_slave_1
[  472.053138] protocol 88fb is buggy, dev hsr_slave_0
[  472.058235] protocol 88fb is buggy, dev hsr_slave_1
[  472.133148] protocol 88fb is buggy, dev hsr_slave_0
[  472.138310] protocol 88fb is buggy, dev hsr_slave_1
[  472.213173] protocol 88fb is buggy, dev hsr_slave_0
[  472.218329] protocol 88fb is buggy, dev hsr_slave_1
[  472.533126] protocol 88fb is buggy, dev hsr_slave_0
[  472.538211] protocol 88fb is buggy, dev hsr_slave_1
[  476.693137] net_ratelimit: 22 callbacks suppressed
[  476.693144] protocol 88fb is buggy, dev hsr_slave_0
[  476.703189] protocol 88fb is buggy, dev hsr_slave_1
[  476.853132] protocol 88fb is buggy, dev hsr_slave_0
[  476.858213] protocol 88fb is buggy, dev hsr_slave_1
[  477.653866] protocol 88fb is buggy, dev hsr_slave_0
[  477.658983] protocol 88fb is buggy, dev hsr_slave_1
[  478.293135] protocol 88fb is buggy, dev hsr_slave_0
[  478.298247] protocol 88fb is buggy, dev hsr_slave_1
[  478.373178] protocol 88fb is buggy, dev hsr_slave_0
[  478.378263] protocol 88fb is buggy, dev hsr_slave_1
[  481.813183] net_ratelimit: 18 callbacks suppressed
[  481.813190] protocol 88fb is buggy, dev hsr_slave_0
[  481.823246] protocol 88fb is buggy, dev hsr_slave_1
[  482.453262] protocol 88fb is buggy, dev hsr_slave_0
[  482.458377] protocol 88fb is buggy, dev hsr_slave_1
[  482.533153] protocol 88fb is buggy, dev hsr_slave_0
[  482.538231] protocol 88fb is buggy, dev hsr_slave_1
[  482.613137] protocol 88fb is buggy, dev hsr_slave_0
[  482.618220] protocol 88fb is buggy, dev hsr_slave_1
[  482.933140] protocol 88fb is buggy, dev hsr_slave_0
[  482.938231] protocol 88fb is buggy, dev hsr_slave_1
[  487.093126] net_ratelimit: 22 callbacks suppressed
[  487.093133] protocol 88fb is buggy, dev hsr_slave_0
[  487.103408] protocol 88fb is buggy, dev hsr_slave_1
[  487.253123] protocol 88fb is buggy, dev hsr_slave_0
[  487.258316] protocol 88fb is buggy, dev hsr_slave_1
[  488.053162] protocol 88fb is buggy, dev hsr_slave_0
[  488.058252] protocol 88fb is buggy, dev hsr_slave_1
[  488.693133] protocol 88fb is buggy, dev hsr_slave_0
[  488.698223] protocol 88fb is buggy, dev hsr_slave_1
[  488.773146] protocol 88fb is buggy, dev hsr_slave_0
[  488.778205] protocol 88fb is buggy, dev hsr_slave_1
[  492.213146] net_ratelimit: 18 callbacks suppressed
[  492.213153] protocol 88fb is buggy, dev hsr_slave_0
[  492.223216] protocol 88fb is buggy, dev hsr_slave_1
[  492.853174] protocol 88fb is buggy, dev hsr_slave_0
[  492.858374] protocol 88fb is buggy, dev hsr_slave_1
[  492.933149] protocol 88fb is buggy, dev hsr_slave_0
[  492.938224] protocol 88fb is buggy, dev hsr_slave_1
[  493.013123] protocol 88fb is buggy, dev hsr_slave_0
[  493.018214] protocol 88fb is buggy, dev hsr_slave_1
[  493.333277] protocol 88fb is buggy, dev hsr_slave_0
[  493.338443] protocol 88fb is buggy, dev hsr_slave_1
[  497.493149] net_ratelimit: 22 callbacks suppressed
[  497.493157] protocol 88fb is buggy, dev hsr_slave_0
[  497.503205] protocol 88fb is buggy, dev hsr_slave_1
[  497.663176] protocol 88fb is buggy, dev hsr_slave_0
[  497.668264] protocol 88fb is buggy, dev hsr_slave_1
[  498.453165] protocol 88fb is buggy, dev hsr_slave_0
[  498.458411] protocol 88fb is buggy, dev hsr_slave_1
[  499.093129] protocol 88fb is buggy, dev hsr_slave_0
[  499.098251] protocol 88fb is buggy, dev hsr_slave_1
[  499.173141] protocol 88fb is buggy, dev hsr_slave_0
[  499.178314] protocol 88fb is buggy, dev hsr_slave_1
[  502.613143] net_ratelimit: 18 callbacks suppressed
[  502.613150] protocol 88fb is buggy, dev hsr_slave_0
[  502.623309] protocol 88fb is buggy, dev hsr_slave_1
[  503.253126] protocol 88fb is buggy, dev hsr_slave_0
[  503.258224] protocol 88fb is buggy, dev hsr_slave_1
[  503.343160] protocol 88fb is buggy, dev hsr_slave_0
[  503.348306] protocol 88fb is buggy, dev hsr_slave_1
[  503.413138] protocol 88fb is buggy, dev hsr_slave_0
[  503.418212] protocol 88fb is buggy, dev hsr_slave_1
[  503.733168] protocol 88fb is buggy, dev hsr_slave_0
[  503.738558] protocol 88fb is buggy, dev hsr_slave_1
[  507.893136] net_ratelimit: 22 callbacks suppressed
[  507.893145] protocol 88fb is buggy, dev hsr_slave_0
[  507.903266] protocol 88fb is buggy, dev hsr_slave_1
[  508.053155] protocol 88fb is buggy, dev hsr_slave_0
[  508.058254] protocol 88fb is buggy, dev hsr_slave_1
[  508.853174] protocol 88fb is buggy, dev hsr_slave_0
[  508.858280] protocol 88fb is buggy, dev hsr_slave_1
[  509.493130] protocol 88fb is buggy, dev hsr_slave_0
[  509.498227] protocol 88fb is buggy, dev hsr_slave_1
[  509.573180] protocol 88fb is buggy, dev hsr_slave_0
[  509.578276] protocol 88fb is buggy, dev hsr_slave_1
[  513.013167] net_ratelimit: 18 callbacks suppressed
[  513.013174] protocol 88fb is buggy, dev hsr_slave_0
[  513.023221] protocol 88fb is buggy, dev hsr_slave_1
[  513.653129] protocol 88fb is buggy, dev hsr_slave_0
[  513.658311] protocol 88fb is buggy, dev hsr_slave_1
[  513.733153] protocol 88fb is buggy, dev hsr_slave_0
[  513.738206] protocol 88fb is buggy, dev hsr_slave_1
[  513.813152] protocol 88fb is buggy, dev hsr_slave_0
[  513.818205] protocol 88fb is buggy, dev hsr_slave_1
[  514.133153] protocol 88fb is buggy, dev hsr_slave_0
[  514.138237] protocol 88fb is buggy, dev hsr_slave_1
[  518.293132] net_ratelimit: 22 callbacks suppressed
[  518.293139] protocol 88fb is buggy, dev hsr_slave_0
[  518.303299] protocol 88fb is buggy, dev hsr_slave_1
[  518.453160] protocol 88fb is buggy, dev hsr_slave_0
[  518.458314] protocol 88fb is buggy, dev hsr_slave_1
[  519.253141] protocol 88fb is buggy, dev hsr_slave_0
[  519.258316] protocol 88fb is buggy, dev hsr_slave_1
[  519.893128] protocol 88fb is buggy, dev hsr_slave_0
[  519.898237] protocol 88fb is buggy, dev hsr_slave_1
[  519.973141] protocol 88fb is buggy, dev hsr_slave_0
[  519.978297] protocol 88fb is buggy, dev hsr_slave_1
[  523.413164] net_ratelimit: 18 callbacks suppressed
[  523.413170] protocol 88fb is buggy, dev hsr_slave_0
[  523.423316] protocol 88fb is buggy, dev hsr_slave_1
[  524.053135] protocol 88fb is buggy, dev hsr_slave_0
[  524.058355] protocol 88fb is buggy, dev hsr_slave_1
[  524.133176] protocol 88fb is buggy, dev hsr_slave_0
[  524.138394] protocol 88fb is buggy, dev hsr_slave_1
[  524.213156] protocol 88fb is buggy, dev hsr_slave_0
[  524.218244] protocol 88fb is buggy, dev hsr_slave_1
[  524.533151] protocol 88fb is buggy, dev hsr_slave_0
[  524.538240] protocol 88fb is buggy, dev hsr_slave_1
[  528.693134] net_ratelimit: 22 callbacks suppressed
[  528.693142] protocol 88fb is buggy, dev hsr_slave_0
[  528.703300] protocol 88fb is buggy, dev hsr_slave_1
[  528.853126] protocol 88fb is buggy, dev hsr_slave_0
[  528.858204] protocol 88fb is buggy, dev hsr_slave_1
[  529.653141] protocol 88fb is buggy, dev hsr_slave_0
[  529.658319] protocol 88fb is buggy, dev hsr_slave_1
[  530.293139] protocol 88fb is buggy, dev hsr_slave_0
[  530.298255] protocol 88fb is buggy, dev hsr_slave_1
[  530.373172] protocol 88fb is buggy, dev hsr_slave_0
[  530.378256] protocol 88fb is buggy, dev hsr_slave_1
[  533.813173] net_ratelimit: 18 callbacks suppressed
[  533.813181] protocol 88fb is buggy, dev hsr_slave_0
[  533.823236] protocol 88fb is buggy, dev hsr_slave_1
[  534.453134] protocol 88fb is buggy, dev hsr_slave_0
[  534.458241] protocol 88fb is buggy, dev hsr_slave_1
[  534.533151] protocol 88fb is buggy, dev hsr_slave_0
[  534.538216] protocol 88fb is buggy, dev hsr_slave_1
[  534.613121] protocol 88fb is buggy, dev hsr_slave_0
[  534.618193] protocol 88fb is buggy, dev hsr_slave_1
[  534.933129] protocol 88fb is buggy, dev hsr_slave_0
[  534.938212] protocol 88fb is buggy, dev hsr_slave_1
[  539.093140] net_ratelimit: 22 callbacks suppressed
[  539.093148] protocol 88fb is buggy, dev hsr_slave_0
[  539.103269] protocol 88fb is buggy, dev hsr_slave_1
[  539.253155] protocol 88fb is buggy, dev hsr_slave_0
[  539.258330] protocol 88fb is buggy, dev hsr_slave_1
[  540.053188] protocol 88fb is buggy, dev hsr_slave_0
[  540.058269] protocol 88fb is buggy, dev hsr_slave_1
[  540.693168] protocol 88fb is buggy, dev hsr_slave_0
[  540.698269] protocol 88fb is buggy, dev hsr_slave_1
[  540.773162] protocol 88fb is buggy, dev hsr_slave_0
[  540.778237] protocol 88fb is buggy, dev hsr_slave_1
[  544.213140] net_ratelimit: 18 callbacks suppressed
[  544.213148] protocol 88fb is buggy, dev hsr_slave_0
[  544.223199] protocol 88fb is buggy, dev hsr_slave_1
[  544.853127] protocol 88fb is buggy, dev hsr_slave_0
[  544.858304] protocol 88fb is buggy, dev hsr_slave_1
[  544.933158] protocol 88fb is buggy, dev hsr_slave_0
[  544.938251] protocol 88fb is buggy, dev hsr_slave_1
[  545.013122] protocol 88fb is buggy, dev hsr_slave_0
[  545.018318] protocol 88fb is buggy, dev hsr_slave_1
[  545.333133] protocol 88fb is buggy, dev hsr_slave_0
[  545.338323] protocol 88fb is buggy, dev hsr_slave_1
[  549.493147] net_ratelimit: 22 callbacks suppressed
[  549.493154] protocol 88fb is buggy, dev hsr_slave_0
[  549.503321] protocol 88fb is buggy, dev hsr_slave_1
[  549.653158] protocol 88fb is buggy, dev hsr_slave_0
[  549.658259] protocol 88fb is buggy, dev hsr_slave_1
[  550.453184] protocol 88fb is buggy, dev hsr_slave_0
[  550.458282] protocol 88fb is buggy, dev hsr_slave_1
[  551.103132] protocol 88fb is buggy, dev hsr_slave_0
[  551.108230] protocol 88fb is buggy, dev hsr_slave_1
[  551.173159] protocol 88fb is buggy, dev hsr_slave_0
[  551.178296] protocol 88fb is buggy, dev hsr_slave_1
[  554.613197] net_ratelimit: 18 callbacks suppressed
[  554.613205] protocol 88fb is buggy, dev hsr_slave_0
[  554.623348] protocol 88fb is buggy, dev hsr_slave_1
[  555.253137] protocol 88fb is buggy, dev hsr_slave_0
[  555.258341] protocol 88fb is buggy, dev hsr_slave_1
[  555.333173] protocol 88fb is buggy, dev hsr_slave_0
[  555.338249] protocol 88fb is buggy, dev hsr_slave_1
[  555.413150] protocol 88fb is buggy, dev hsr_slave_0
[  555.418241] protocol 88fb is buggy, dev hsr_slave_1
[  555.733140] protocol 88fb is buggy, dev hsr_slave_0
[  555.738233] protocol 88fb is buggy, dev hsr_slave_1
[  559.893136] net_ratelimit: 22 callbacks suppressed
[  559.893146] protocol 88fb is buggy, dev hsr_slave_0
[  559.903198] protocol 88fb is buggy, dev hsr_slave_1
[  560.053135] protocol 88fb is buggy, dev hsr_slave_0
[  560.058223] protocol 88fb is buggy, dev hsr_slave_1
[  560.853152] protocol 88fb is buggy, dev hsr_slave_0
[  560.858252] protocol 88fb is buggy, dev hsr_slave_1
[  561.493146] protocol 88fb is buggy, dev hsr_slave_0
[  561.498254] protocol 88fb is buggy, dev hsr_slave_1
[  561.573163] protocol 88fb is buggy, dev hsr_slave_0
[  561.578247] protocol 88fb is buggy, dev hsr_slave_1
[  565.013154] net_ratelimit: 18 callbacks suppressed
[  565.013162] protocol 88fb is buggy, dev hsr_slave_0
[  565.023194] protocol 88fb is buggy, dev hsr_slave_1
[  565.653154] protocol 88fb is buggy, dev hsr_slave_0
[  565.658240] protocol 88fb is buggy, dev hsr_slave_1
[  565.733169] protocol 88fb is buggy, dev hsr_slave_0
[  565.738347] protocol 88fb is buggy, dev hsr_slave_1
[  565.813129] protocol 88fb is buggy, dev hsr_slave_0
[  565.818327] protocol 88fb is buggy, dev hsr_slave_1
[  566.133161] protocol 88fb is buggy, dev hsr_slave_0
[  566.138258] protocol 88fb is buggy, dev hsr_slave_1
[  570.293150] net_ratelimit: 22 callbacks suppressed
[  570.293158] protocol 88fb is buggy, dev hsr_slave_0
[  570.303224] protocol 88fb is buggy, dev hsr_slave_1
[  570.453131] protocol 88fb is buggy, dev hsr_slave_0
[  570.458235] protocol 88fb is buggy, dev hsr_slave_1
[  571.253168] protocol 88fb is buggy, dev hsr_slave_0
[  571.258266] protocol 88fb is buggy, dev hsr_slave_1
[  571.893133] protocol 88fb is buggy, dev hsr_slave_0
[  571.898240] protocol 88fb is buggy, dev hsr_slave_1
[  571.973162] protocol 88fb is buggy, dev hsr_slave_0
[  571.978240] protocol 88fb is buggy, dev hsr_slave_1
[  575.413195] net_ratelimit: 18 callbacks suppressed
[  575.413201] protocol 88fb is buggy, dev hsr_slave_0
[  575.423298] protocol 88fb is buggy, dev hsr_slave_1
[  576.053140] protocol 88fb is buggy, dev hsr_slave_0
[  576.058253] protocol 88fb is buggy, dev hsr_slave_1
[  576.133160] protocol 88fb is buggy, dev hsr_slave_0
[  576.138245] protocol 88fb is buggy, dev hsr_slave_1
[  576.213131] protocol 88fb is buggy, dev hsr_slave_0
[  576.218211] protocol 88fb is buggy, dev hsr_slave_1
[  576.533157] protocol 88fb is buggy, dev hsr_slave_0
[  576.538256] protocol 88fb is buggy, dev hsr_slave_1
[  580.693139] net_ratelimit: 22 callbacks suppressed
[  580.693146] protocol 88fb is buggy, dev hsr_slave_0
[  580.703280] protocol 88fb is buggy, dev hsr_slave_1
[  580.853131] protocol 88fb is buggy, dev hsr_slave_0
[  580.858220] protocol 88fb is buggy, dev hsr_slave_1
[  581.653180] protocol 88fb is buggy, dev hsr_slave_0
[  581.658267] protocol 88fb is buggy, dev hsr_slave_1
[  582.293132] protocol 88fb is buggy, dev hsr_slave_0
[  582.298324] protocol 88fb is buggy, dev hsr_slave_1
[  582.373173] protocol 88fb is buggy, dev hsr_slave_0
[  582.378346] protocol 88fb is buggy, dev hsr_slave_1
[  585.813189] net_ratelimit: 18 callbacks suppressed
[  585.813197] protocol 88fb is buggy, dev hsr_slave_0
[  585.823543] protocol 88fb is buggy, dev hsr_slave_1
[  586.453136] protocol 88fb is buggy, dev hsr_slave_0
[  586.458236] protocol 88fb is buggy, dev hsr_slave_1
[  586.533151] protocol 88fb is buggy, dev hsr_slave_0
[  586.538306] protocol 88fb is buggy, dev hsr_slave_1
[  586.613126] protocol 88fb is buggy, dev hsr_slave_0
[  586.618316] protocol 88fb is buggy, dev hsr_slave_1
[  586.933148] protocol 88fb is buggy, dev hsr_slave_0
[  586.938262] protocol 88fb is buggy, dev hsr_slave_1
[  591.093145] net_ratelimit: 22 callbacks suppressed
[  591.093153] protocol 88fb is buggy, dev hsr_slave_0
[  591.103208] protocol 88fb is buggy, dev hsr_slave_1
[  591.253140] protocol 88fb is buggy, dev hsr_slave_0
[  591.258244] protocol 88fb is buggy, dev hsr_slave_1
[  592.053162] protocol 88fb is buggy, dev hsr_slave_0
[  592.058247] protocol 88fb is buggy, dev hsr_slave_1
[  592.693146] protocol 88fb is buggy, dev hsr_slave_0
[  592.698364] protocol 88fb is buggy, dev hsr_slave_1
[  592.773156] protocol 88fb is buggy, dev hsr_slave_0
[  592.778238] protocol 88fb is buggy, dev hsr_slave_1
[  596.213165] net_ratelimit: 18 callbacks suppressed
[  596.213172] protocol 88fb is buggy, dev hsr_slave_0
[  596.223313] protocol 88fb is buggy, dev hsr_slave_1
[  596.853128] protocol 88fb is buggy, dev hsr_slave_0
[  596.858304] protocol 88fb is buggy, dev hsr_slave_1
[  596.933156] protocol 88fb is buggy, dev hsr_slave_0
[  596.938222] protocol 88fb is buggy, dev hsr_slave_1
[  597.013129] protocol 88fb is buggy, dev hsr_slave_0
[  597.018214] protocol 88fb is buggy, dev hsr_slave_1
[  597.333150] protocol 88fb is buggy, dev hsr_slave_0
[  597.338416] protocol 88fb is buggy, dev hsr_slave_1
[  601.493160] net_ratelimit: 22 callbacks suppressed
[  601.493168] protocol 88fb is buggy, dev hsr_slave_0
[  601.503215] protocol 88fb is buggy, dev hsr_slave_1
[  601.653135] protocol 88fb is buggy, dev hsr_slave_0
[  601.658305] protocol 88fb is buggy, dev hsr_slave_1
[  602.453215] protocol 88fb is buggy, dev hsr_slave_0
[  602.458299] protocol 88fb is buggy, dev hsr_slave_1
[  603.093135] protocol 88fb is buggy, dev hsr_slave_0
[  603.098230] protocol 88fb is buggy, dev hsr_slave_1
[  603.173159] protocol 88fb is buggy, dev hsr_slave_0
[  603.178241] protocol 88fb is buggy, dev hsr_slave_1
[  606.613146] net_ratelimit: 18 callbacks suppressed
[  606.613173] protocol 88fb is buggy, dev hsr_slave_0
[  606.623319] protocol 88fb is buggy, dev hsr_slave_1
[  607.253133] protocol 88fb is buggy, dev hsr_slave_0
[  607.258240] protocol 88fb is buggy, dev hsr_slave_1
[  607.333152] protocol 88fb is buggy, dev hsr_slave_0
[  607.338310] protocol 88fb is buggy, dev hsr_slave_1
[  607.413143] protocol 88fb is buggy, dev hsr_slave_0
[  607.418336] protocol 88fb is buggy, dev hsr_slave_1
[  607.733161] protocol 88fb is buggy, dev hsr_slave_0
[  607.738243] protocol 88fb is buggy, dev hsr_slave_1
[  611.893134] net_ratelimit: 22 callbacks suppressed
[  611.893142] protocol 88fb is buggy, dev hsr_slave_0
[  611.903292] protocol 88fb is buggy, dev hsr_slave_1
[  612.053126] protocol 88fb is buggy, dev hsr_slave_0
[  612.058200] protocol 88fb is buggy, dev hsr_slave_1
[  612.853162] protocol 88fb is buggy, dev hsr_slave_0
[  612.858237] protocol 88fb is buggy, dev hsr_slave_1
[  613.493146] protocol 88fb is buggy, dev hsr_slave_0
[  613.498239] protocol 88fb is buggy, dev hsr_slave_1
[  613.573149] protocol 88fb is buggy, dev hsr_slave_0
[  613.578221] protocol 88fb is buggy, dev hsr_slave_1
[  617.013166] net_ratelimit: 18 callbacks suppressed
[  617.013174] protocol 88fb is buggy, dev hsr_slave_0
[  617.023344] protocol 88fb is buggy, dev hsr_slave_1
[  617.653141] protocol 88fb is buggy, dev hsr_slave_0
[  617.658249] protocol 88fb is buggy, dev hsr_slave_1
[  617.733180] protocol 88fb is buggy, dev hsr_slave_0
[  617.738256] protocol 88fb is buggy, dev hsr_slave_1
[  617.813128] protocol 88fb is buggy, dev hsr_slave_0
[  617.818325] protocol 88fb is buggy, dev hsr_slave_1
[  618.133138] protocol 88fb is buggy, dev hsr_slave_0
[  618.138241] protocol 88fb is buggy, dev hsr_slave_1
[  621.973313] INFO: task syz-executor.2:16277 blocked for more than 140 seconds.
[  621.980855]       Not tainted 5.0.0-rc7+ #84
[  622.003099] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  622.011080] syz-executor.2  D28224 16277   7434 0x00000004
[  622.023083] Call Trace:
[  622.025845]  __schedule+0x817/0x1cc0
[  622.029550]  ? __mutex_lock+0x721/0x1310
[  622.043099]  ? pci_mmcfg_check_reserved+0x170/0x170
[  622.048115]  schedule+0x92/0x180
[  622.051470]  schedule_preempt_disabled+0x13/0x20
[  622.073091]  __mutex_lock+0x726/0x1310
[  622.077039]  ? do_futex+0x178/0x1d50
[  622.080809]  ? vhost_net_stop_vq+0x2d/0x120
[  622.093099]  ? mutex_trylock+0x1e0/0x1e0
[  622.097219]  ? kasan_check_write+0x14/0x20
[  622.101443]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  622.123122]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  622.128662]  ? wait_for_completion+0x440/0x440
[  622.143097]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  622.148635]  mutex_lock_nested+0x16/0x20
[  622.152686]  ? mutex_lock_nested+0x16/0x20
[  622.173246]  vhost_net_stop_vq+0x2d/0x120
[  622.177502]  ? handle_rx_kick+0x50/0x50
[  622.181495]  vhost_net_release+0x5d/0x260
[  622.207607]  __fput+0x2df/0x8d0
[  622.210904]  ____fput+0x16/0x20
[  622.227764]  task_work_run+0x14a/0x1c0
[  622.231665]  exit_to_usermode_loop+0x273/0x2c0
[  622.243100]  do_syscall_64+0x52d/0x610
[  622.246987]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  622.252175] RIP: 0033:0x411d31
[  622.273093] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  622.293129] net_ratelimit: 22 callbacks suppressed
[  622.293136] protocol 88fb is buggy, dev hsr_slave_0
[  622.303142] protocol 88fb is buggy, dev hsr_slave_1
[  622.333100] RSP: 002b:00007ffe41f80530 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  622.340809] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411d31
[  622.357804] RDX: 0000000000000000 RSI: 0000000000740880 RDI: 0000000000000003
[  622.378148] RBP: 0000000000000000 R08: 0000000000740878 R09: 00000000000718e9
[  622.397777] R10: 00007ffe41f80450 R11: 0000000000000293 R12: 0000000000000000
[  622.417684] R13: 0000000000000001 R14: 000000000000019e R15: 0000000000000002
[  622.437837] 
[  622.437837] Showing all locks held in the system:
[  622.453145] protocol 88fb is buggy, dev hsr_slave_0
[  622.458293] protocol 88fb is buggy, dev hsr_slave_1
[  622.473101] 1 lock held by khungtaskd/1040:
[  622.477426]  #0: 00000000cb5adbf5 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e
[  622.493165] 1 lock held by rsyslogd/7279:
[  622.497305]  #0: 00000000f702f362 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[  622.523090] 2 locks held by getty/7392:
[  622.527058]  #0: 00000000b1bfc1e0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.543082]  #1: 000000006c16d6f5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.552091] 2 locks held by getty/7393:
[  622.573079]  #0: 0000000099a2f619 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.581821]  #1: 0000000057f963e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.603087] 2 locks held by getty/7394:
[  622.607142]  #0: 00000000747228ea (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.633704]  #1: 00000000cd99a416 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.642553] 2 locks held by getty/7395:
[  622.653086]  #0: 00000000e771f236 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.661337]  #1: 00000000ec32044a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.683087] 2 locks held by getty/7396:
[  622.687049]  #0: 00000000189f113b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.695425]  #1: 00000000f2c5248b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.723102] 2 locks held by getty/7397:
[  622.727167]  #0: 00000000c483023b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.743087]  #1: 00000000de09b24b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.752359] 2 locks held by getty/7398:
[  622.773101]  #0: 000000007ada99b5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  622.781456]  #1: 00000000bda0fcca (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  622.817639] 1 lock held by syz-executor.2/16277:
[  622.822405]  #0: 00000000308dcdb3 (&vq->mutex){+.+.}, at: vhost_net_stop_vq+0x2d/0x120
[  622.857593] 1 lock held by vhost-16281/16284:
[  622.862089] 1 lock held by vhost-16285/16286:
[  622.866752] 
[  622.868374] =============================================
[  622.868374] 
[  622.901988] NMI backtrace for cpu 1
[  622.905709] CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc7+ #84
[  622.912535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  622.921871] Call Trace:
[  622.924455]  dump_stack+0x172/0x1f0
[  622.928095]  nmi_cpu_backtrace.cold+0x63/0xa4
[  622.932688]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  622.937701]  nmi_trigger_cpumask_backtrace+0x1be/0x236
[  622.942990]  arch_trigger_cpumask_backtrace+0x14/0x20
[  622.948182]  watchdog+0x9df/0xee0
[  622.951682]  kthread+0x357/0x430
[  622.955049]  ? reset_hung_task_detector+0x30/0x30
[  622.959884]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  622.965411]  ret_from_fork+0x3a/0x50
[  622.969348] Sending NMI from CPU 1 to CPUs 0:
[  622.974535] NMI backtrace for cpu 0
[  622.974539] CPU: 0 PID: 16284 Comm: vhost-16281 Not tainted 5.0.0-rc7+ #84
[  622.974545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  622.974548] RIP: 0010:__sanitizer_cov_trace_cmp8+0x0/0x20
[  622.974557] Code: ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 04 00 00 00 48 89 e5 48 8b 4d 08 e8 3a ff ff ff 5d c3 0f 1f 84 00 00 00 00 00 <55> 48 89 f2 48 89 fe bf 06 00 00 00 48 89 e5 48 8b 4d 08 e8 18 ff
[  622.974560] RSP: 0018:ffff88808d687aa0 EFLAGS: 00000293
[  622.974566] RAX: ffff888086682580 RBX: ffff88808d7dce00 RCX: ffffffff853d2fc2
[  622.974570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  622.974573] RBP: ffff88808d687b30 R08: ffff888086682580 R09: ffffed1008c194e7
[  622.974577] R10: ffff88808d687b68 R11: ffff8880460ca737 R12: 0000000000000000
[  622.974581] R13: 0000000000000000 R14: ffffffffffffffff R15: dffffc0000000000
[  622.974586] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  622.974589] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  622.974593] CR2: ffffffffff600400 CR3: 000000005170d000 CR4: 00000000001426f0
[  622.974597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  622.974601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  622.974603] Call Trace:
[  622.974606]  ? iotlb_access_ok+0x388/0x540
[  622.974609]  vq_iotlb_prefetch+0x114/0x230
[  622.974611]  handle_rx+0x149/0x1900
[  622.974615]  ? finish_task_switch+0x146/0x790
[  622.974618]  ? find_held_lock+0x35/0x130
[  622.974621]  ? finish_task_switch+0x146/0x790
[  622.974624]  ? _raw_spin_unlock_irq+0x28/0x90
[  622.974627]  ? finish_task_switch+0x146/0x790
[  622.974630]  ? _raw_spin_unlock_irq+0x28/0x90
[  622.974633]  ? lockdep_hardirqs_on+0x415/0x5d0
[  622.974636]  ? vhost_net_open+0x8e0/0x8e0
[  622.974639]  ? trace_hardirqs_on+0x67/0x230
[  622.974642]  ? cache_grow_begin.cold+0x2d/0x31
[  622.974645]  ? _raw_spin_unlock_irq+0x5e/0x90
[  622.974647]  ? inc_ucount+0x640/0x800
[  622.974650]  ? __switch_to_asm+0x34/0x70
[  622.974653]  ? __switch_to_asm+0x40/0x70
[  622.974656]  ? __schedule+0x81f/0x1cc0
[  622.974659]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  622.974662]  handle_rx_net+0x19/0x20
[  622.974664]  vhost_worker+0x2a2/0x4a0
[  622.974667]  ? vhost_flush_work+0x20/0x20
[  622.974670]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  622.974673]  ? __kthread_parkme+0xfb/0x1b0
[  622.974676]  kthread+0x357/0x430
[  622.974679]  ? vhost_flush_work+0x20/0x20
[  622.974682]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  622.974684]  ret_from_fork+0x3a/0x50
[  622.976544] Kernel panic - not syncing: hung_task: blocked tasks
[  623.224472] CPU: 1 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc7+ #84
[  623.231296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  623.240633] Call Trace:
[  623.243219]  dump_stack+0x172/0x1f0
[  623.246934]  panic+0x2cb/0x65c
[  623.250118]  ? __warn_printk+0xf3/0xf3
[  623.253188] protocol 88fb is buggy, dev hsr_slave_0
[  623.254024]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  623.259068] protocol 88fb is buggy, dev hsr_slave_1
[  623.263951]  ? ___preempt_schedule+0x16/0x18
[  623.263968]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  623.263980]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x236
[  623.263994]  ? nmi_trigger_cpumask_backtrace+0x204/0x236
[  623.289682]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  623.295128]  watchdog+0x9f0/0xee0
[  623.298578]  kthread+0x357/0x430
[  623.302146]  ? reset_hung_task_detector+0x30/0x30
[  623.306987]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  623.312542]  ret_from_fork+0x3a/0x50
[  623.317862] Kernel Offset: disabled
[  623.321489] Rebooting in 86400 seconds..