&(0x7f0000000040)=0x9)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0xb8f4525f03fa177c)

20:25:01 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80)=<r8=>0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/hwrng\x00', 0x10300, 0x0)
io_cancel(r8, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x2, 0x2, r9, &(0x7f0000002b00)="b55a294eace8d593b9a6647622b147352270794eb26235d35ea54bfb8abdeb62217614db1dcc5e776923755db790b2b0ca2921043ba3e5f976", 0x39, 0x5, 0x0, 0x3, r10}, &(0x7f0000002bc0))

[  343.978395][T12241] QAT: Invalid ioctl
[  344.018480][T12245] QAT: Invalid ioctl
20:25:02 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
syslog(0x0, &(0x7f0000000000)=""/57, 0x39)

20:25:02 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80)=<r8=>0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/hwrng\x00', 0x10300, 0x0)
io_cancel(r8, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x2, 0x2, r9, &(0x7f0000002b00)="b55a294eace8d593b9a6647622b147352270794eb26235d35ea54bfb8abdeb62217614db1dcc5e776923755db790b2b0ca2921043ba3e5f976", 0x39, 0x5, 0x0, 0x3, r10}, &(0x7f0000002bc0))

20:25:02 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80))
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/hwrng\x00', 0x10300, 0x0)

[  344.276598][T12252] QAT: Invalid ioctl
20:25:02 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:02 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
prctl$PR_CAPBSET_DROP(0x18, 0x11)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000001300)={'syz', 0x1}, &(0x7f0000001340)="fe", 0x1, 0xffffffffffffffff)
keyctl$chown(0x6, r1, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
r4 = dup3(0xffffffffffffffff, r2, 0x1e3909e544b5f743)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffff50e}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1030ebb913d97627}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1c010}, 0x10)
keyctl$setperm(0x5, r1, 0x83000)
ptrace$cont(0x70a41678455733b1, r0, 0x7ff, 0x9)

[  344.391128][T12255] QAT: Invalid ioctl
20:25:02 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x795d516644297b47})
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), 0x4)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:02 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80))
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/hwrng\x00', 0x10300, 0x0)

20:25:02 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80))
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:02 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x10040)
r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x9, 0x100)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./file0\x00', r1)
quotactl(0x3, &(0x7f0000000000)='./file0\x00', 0xee00, &(0x7f0000000040)="a84912788c672da573b99b23754f5d374b0eda475f018d5186d5d39eb403625b927810f82ce629a60e153df5529a068259b9e3e4c122b9147dc40443dc9101f94b95c914afab3e6814149ffc97d1931be5f2baca87cc0db78d475cbffc6031f3627e22742e2e3e492d8baaeb45ec701dd7ea8cc4a8ee4d9448bbaaba568bd0676b53446b178fb14a578319608d9e8831c150707201ded5bcbe46d3f5db0f363d3c0fe679f2d1019a6f91adaf204eb1d5c9c3c73fa8f6b9678824f881efd824a8cbd4505d2957b8d5969c")

[  344.690759][T12271] QAT: Invalid ioctl
[  344.794564][T12274] QAT: Invalid ioctl
20:25:02 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:02 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)="8b3a27875ec00ec91a0e8ee4ce27fa07e88561c7351444", 0x17)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000)

20:25:03 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80))
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:03 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:03 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x795d516644297b47})
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040), 0x4)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:03 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x400)

[  345.131933][T12290] QAT: Invalid ioctl
[  345.136324][T12289] QAT: Invalid ioctl
20:25:03 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))
io_setup(0x980, &(0x7f0000002a80))

20:25:03 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  345.377186][T12299] QAT: Invalid ioctl
[  345.423547][T12302] QAT: Invalid ioctl
20:25:03 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:03 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:03 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_setup(0x9, &(0x7f0000000080))
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
getpgrp(0x0)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @rand_addr="ca7a1c9ff53b08ff3b106b555bbcbfa3", 0x6ca}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80100, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r6=>0x0}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000280)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000001c0)=0x84)

[  345.610926][T12307] QAT: Invalid ioctl
20:25:03 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x795d516644297b47})
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:03 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="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", 0x1000)
ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000002a40))

20:25:03 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  345.792511][T12317] QAT: Invalid ioctl
20:25:04 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
r7 = syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)
write$ppp(r7, &(0x7f0000001a40)="efc4056855cff5902d155b618d6cfa50044a25ecde8bd4b6373cae753032c094a8e61205da6d7ef7db2e9df2a53ac83c0df45306b0921700aa697dc3c6f140fc68198a608cc5183245ac30928b7532bf14c6bb2fb3f274ecd82b3b4552d28b0b6b1399d5d167c4198deacf7381bdf9e5aee92f4e97d90efbd7a86a7004d4057dd5a4f4abe5947e8b37ccf67f644ce344188f6a6c797ee2c06a38168617b993d54cfdb12b9af6c1bb0019518746a10be1e8f47004fd33793dab8a0599ec204c0e41b9befec2eea3665d769450328a819c85584c7018075eb9b807d40b96086ff11f888821accc17efd991fa026fe878f9061c03be786567dfb6203b5519fd1a026882292d6fd5e8ed75ca677a38d4385c2bfa816c311c9a0e7c3e5c6e51feba6364626a0a9d7da674b774c4f9c7e575ddfd4f7f73ea9cc959328799350465b960d54f4c250ee6465cc6fe70cc8e6a26965ecf18c5b34f7fdf2bd000ba385315098a06576ce100e87df2e8d687bd04369058b285f1de4298283d2ded5afa96d07ed377b03dc7124d9c9de6de05a2e87b1fff1a9d4667d5715e19f0320bff5417aa5eb2429b68b4eabe446870f1b5d43e75641b2473686646a7a82f41858fcd7a6ac60102e53dcc1ee0b2abb57d2e45a7cb9454edce872ceb1552a7394f7b04a515542d30270a9b57000486e40b2600b90f786f3fd51f66c7a15eae2ce8c5e3e6aab0f5b528d1405eba93f7ceff4a124496c3ae698b4ebf69ad6797d2ef1364bf9023a27f94166c1e5f9f739f6134d6b99dbf57f3f14fe898de1abfcd51df093ad32899c3db0276cecd27ee802b4a3cc2cabdc1450dc23b992ac2e252ef006db4165a64376e94a8e0acf487328e2632a31953b0f236f7b5b720baa05e06b97e98df776ab8605e5d3a7457db209294c2d3de73267e60cfde13f8061ba9a4f7e2e4e339897b290b7f07b60a4a82be8131132c7019e2f58ddda1c3ea7fadc2c341e0a988fef1f6db2d80d39177a3c34289b22953f55099bf4bc8f5881d1bb95134c37d6f89ffd26206b723e148279d9c5f49bea4be9aa9a6ec5cc2391b0dfcc5b9d6060c2a9ad9cce121c7bbaf357289d1c4ce9f21fab25c4b7d09449890ba209621854f82ad2c7af226c724fce7057a940045e97012979c7525d666747e356aa4c8d92647789fbe67d8716f15c13c3a580241ef2b573b41695685ee62439a29653e2b4de7eeb5e3ab280ef4295c8ac438c9df10dbd1698a2fb75ceb50f5838ce195087cbdba90b39e2a6f957f9a26ec2e5b962ef6dea2fc28b66cfbf01025f74e23a92dc04c8d47153adaf676e7380f1d7843b3524f2e788b5f33870b04ba11963a9e33c885c3f6765b93abc0066bc7fad1385c0defcf387356bd017ed29e5a130885a0033217ac0de766db6623bda2cd54c2980ccf66a7d464d113145426f2b30aa771e659025e90aba02aaa0cc2d1032e3a21319d03401288c9f7fc34c53f043b8ad0a107377f7a2b30b4fa15bf00c762b5d93c5035596607796e5e4b620a1fa9557319971c33f4752a5d4b7fa53624b34048651d98058609361f9bfd871f2103b336a554297b9f24e97cbc628dad6dfb02dab7723d754d5990a5c6196fef83c9ed81906fe7d6a88e56cf8ab22a59467e555f70ae0a784c7c442e63d079302601842ff1d2e019cbf6de5a7c1c5b61ba19e16a73ce0fc8e03ffdbc4865e7a5c334d3a7eac0e3d7583754bab9992bedb4b08e4e26fe7d79ad9616330ac7bfe960da48a2146d4e2c72e7ad98211167612df17cac1f6402f6bf05ed81850b1aa087b08e4c1336dbe6af8b6f1b96d2d65806e07bc153dce7e0ff53951fd86dd003b1acb73812277831c0e61a419bc0774ff12d8f80203ac6824770b34dd0b367f3c345d23ed90fb33b1189e9c296fbe7c153dd4e140dc33d098fb6af456a48445f0c2ac06ae33fe97a274dc4e6550e8758e4f0a2d43058b174f9a969810d778224cef34b8487e3ed2f9b147d8c8dcb9304f0c8b35d94280c5cfb7ff5ca4ec01ccf211fa49cd80f6d7151bdec59f0a00bd23268f1b0872d134a6f51e4419e1645c0a0e667c85928b1bbf0ef332619d32a206fa345ae78544b128eb523a5b03c260c83bd2d4b08b6b21ba31c2c95ce31b3ee45f6083f81b76a76e3dfe39ea94709b684d71e3df9acab173199fc6468bd1a3819ca63e09b42ae6645e3127a2051e36d93a413434616d25d3b93ff56264334cbd5e909c428e260ec877ee799133a1a8a5777ce92b338e7d46aad4c1a708e56344786dddf0e3fb7879fe29dfd16bcee9bcbfb4e356d1021ceb52fe159512d19488e474bf108e77ffc03f145c11a1a4e8c946ec043db68d72c9f295e6397cc784a8683cc88d5bc3d53371483dbd8f0d5b3ad453bcdf5b15b00d225dd414af4f6408262670aba7115f37a87dd875777c02cd5e59f9605b0a9b36e58cea1a42bc3b3bba2c01e3b969dfe148095fa3f89c2adea5c25d51e5f2af4a1e485ad57da966c8bd81d9dfa122ffe98e84a8f664861daefc926fa1262d0366dc23a5fba04a8c3d06542910b08758c562e5545ca5063dd6cec714ea17f19079e9a9dcc134b3e981d21f33942c48f7ff451c70a1de62c95a51e8c1d32770ed3d4351709aa7b9b477bd424eef7b52fa6d9582fd1258b2edde4d5d2f015e92566130efe33cfed14f57b46bca11155f021224a4fb9c62230cbf445805e19811840e21d32e181926940b923efe17ea2ea1e9d53772e17febf3c8f58c2a69788f84edc20d619d7c0b12991fc59499033bbebb6816b47898f53036b43cd4b4aa3eb3d413f6e3296ded0a41c77bacfeeb625a25dd7dadb19275091a60727480228c53813920d23c6d38db2769dbab9fe2abb267497afd36e74a9b88b3075f6ad678480bb84423b2f711a9443e17aad2726ac3f875104d87600c449a9372e9bb9bcc3667c8a546e18f471d381b19ae9a3ec92a8bcc13f4d093958c2554b6cfbeff4e0339b21e7953bd1d4718bad5e0ed49deef2b3b8d3c051b331201f9a111d9ba3cd6040d5bc988f40c347a748b66e33c34f6b4926891e84b35aa79a8f8a03b8e4b32bb421a175fcfaed06b4fe0aa940796da0bfcab6461b9b1dc1b788b6a31a657755cce96ee8bc6d3207c26c38d0e54e109730791eedd6c65b7d24e031c759b201701b97dabd74a3d7e14ab635d632c9a0ee2e8700884de46a6513dcbb9638c6e2c4ccbb3a71a89171d615738ffc043f7cfd4d976ee5139b863bf8b26aaf6b592b8e4c51d9f9c764b52c1bf33a2f67c35bfe08980c99b3ef9def79e2777f5ed1da1a9855f2a8043ab380eb6a56693157bbd8e7128594f7dba15b30a687b949cde1338d416f9728a0a6e39a73e9670e1ff2781be6b04ddd9dacc43bb2a87070a5d35bb4ed178ec4fa770186612b1c26102f248f961a86e8f31e2f34199657ed4ccbee05e7f29c69c34b78c88dc8ccc74864a77d7b2bbe5b29909324411b3d204e4c42d5d6d461c1b7e39896dc76ad58490c51adfbbb9373eb4a17dd955d4dba0bb523a62fadeedbebbbd7c4e082431c49d323bb6a51a0dfa56ecc27cb144e574b0a830c6168821bb624248902be393923e57f1843ea517068cd012fd8192685fc8d581d24b145a5c4c5183751fbfbe22645e10fb79863881b682070e83f84d353009c3e76cba2788494ba6634b26635837437f273300bcf54cc5a8713b25892f78fce6af4354b68858e18f9ea5f85e304f455cb3c15dd0bd2583213106996ce939faefd5d22e0bef731efa5b660d0971de55aadb8c68e8e89432138b4fce5d9ea76acaee404337a5ac79fe1ce0239447ff587af4535fcd6c185a1c33589b8c0a77b00c864106790309b1c418350f0da0f41fffaa9962515f2d70333a8fa115025aa4c266a934bd33733f25f930490110977ff492f4d31a1359256664ee33a27cf7588455ce04e9bcdab23ca317454c7c5ebc94dc3a8841e3878dcad3fa5d89fb078b169862ba7bfa26f906e68a9fe759594bed23c11870c0142e9f8681955ade4966079ea750d065ffcb2d7a5be714e73422e233eff1887e2e9a79621caea2c184840f22ce5d99d412be1cd160fb7980ef4dd65d8da48e7efc086ca639acadf0e9340a7a435dc42c1ff74254e40d0592a92a84709f7d5d05ce7aad11d35bea171387db09f61cbc942092f8c8e1e2e3c94c25ebe3378fc0f1cb6f74568884b0725b382c91edc5d9c7ca52014ad9c98d7b32097e779b2ee043cf4d7cee9f3c096ae6af5ed12375b1f8df45e645ec52022804939e241f17c3ef266670bf6eaf1dddcf77ce63cccb7f5edae5be42e1aab828b77f303711b3c782c60d065e66e95a31407c19f2225693b01d10fb823edfe21ab0126ad241a9f920aba4c25cbb5630a2ab83bed7f2aed72c8d906c97aac369e800852cbcb8b54b2752c237decf316bc58f64f908cc11bcfab0773aa555b030d11986184dd7e55416a425bbae63d94b425671201171e800dac07f7d8c65e7df124f0a3f84007bef7aae26f5c64d3132459c6d01e12ac6f5a64164ddf83836b4215a82af1e1ab3020959c90423ee7b026cc632d52f37fe1829d35afe2a4ed6b50fb7b7ebedefce830f5aeb8317d436b2b77621df5095a71e5352c9a8d2eb98bdd7b0817aeb4a0c6e562ae2c1261449e0b992cf81de7756bd7059148360e302f71d264a7c11b38a3797a8e72916de7db52fe8b405814d8ab6d1348a253b5d749a4e414016a36473a5c130404b7b3353d24cbf828904070eed6c5fc19e0295cc76d8129026b3bb1cc22051e3f55adb5d40514084daeab1927225e98f655f241badba82244123810df534888b4b2502dfbb485c301e7af843df8b1fab0c363e5b22a49e4394e139e2b815095ff60f11b0c6187846a8d6d4d0e1ef45db9141bd621876688ea0f1e2b3352440cad6fa96db0838b569b56d6ba49714b776aa752f57fbe1ba9c9062c3c66d0422400137c6fcc7ae43c2223f4bb3ea92f69d407714e9d95bd1fa927ecdf2acdcde0feb7c2ed5afc15f9b9b70f7f6a09ee913abb30908133cdf7ea2c96e484888dfdd6b0be5a385425552dc69e79d4201e9ba31f2e06be8f729572b90a02dde861eb178b47766df70fda0214a29267c7507169637cd358bd6e05da6a81bdaee03d2d0810ca1b3aa365fe103e37f2a6b9d061026e7058385f7d070cbec9e89153832ffedcc387e4cfe369c26637a14be1255741d89f4e4ea7b5ac7026014f1647b3fe207c79c6efdce284d2b9780011f35a565f7a0d27ba8c6ad94f3518c200834a18daa60832937a7eb51876d039fadf59b7b602cbad7bc21cecda78d52cfbb3b3a73150e5e6aaa5252dabe025ad4a12d73afcc672f960f06b8734622bb2b3e98c9fc639da8572f75c8d3ebcd35c398fe41bc0813b2d2f70a540ea9a63409fffa67fd479a2e0b64d97fb49deac776622bd3cdf7b9e2aab33d0a4140cc286aacacfd7cd2163993136f18f8b7c137be81315fc784544d253e8002788b6b56877ca767d84caa81bdef1ea6722c2e0ed94b47185631640f98d0c080cc02c76db6b214842f370554caa36ebbd5f21977555a59b2582b3b40c2bc9e3e5d4f8ae72fe5ee62a0ef40edd731a9fde3db196ef25dc44ccde4ad840337006e4ef0d6b452317129aac0c2fe12dce95b788fb4f3fe45f1c406dcce7c30d3b9cc3c85086b08c43670e6a0630c66101851ed38afc1325acae646b94369710f3895f7bbf7f502e9aa8d69aeee27e5be875d514a2b039d0a74645b4e10ffc0dd97f479d5ce707ae7e9b928a69efeb", 0x1000)

[  345.942104][T12320] QAT: Invalid ioctl
20:25:04 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  346.071949][T12323] QAT: Invalid ioctl
20:25:04 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:04 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:04 executing program 2:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10001, 0x0, &(0x7f0000ffc000/0x3000)=nil})
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

[  346.215917][T12328] QAT: Invalid ioctl
20:25:04 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)
syz_open_dev$sndpcmc(&(0x7f0000001a00)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000)

20:25:04 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
socket$isdn(0x22, 0x3, 0x1)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  346.360112][T12339] QAT: Invalid ioctl
20:25:04 executing program 2:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x10002)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @reserved})
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:25:04 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}], 0x10)

[  346.519999][T12345] QAT: Invalid ioctl
20:25:04 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x511103)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000)

[  346.645982][T12351] QAT: Invalid ioctl
20:25:04 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:04 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  346.785486][T12356] QAT: Invalid ioctl
20:25:04 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:04 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:05 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
r6 = socket$isdn(0x22, 0x3, 0x1)
sendfile(r6, r1, 0x0, 0x1000)

[  347.022518][T12366] QAT: Invalid ioctl
20:25:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
execveat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000)

20:25:05 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  347.181565][T12373] QAT: Invalid ioctl
[  347.246399][T12375] QAT: Invalid ioctl
20:25:05 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:05 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)
socket$isdn(0x22, 0x3, 0x1)

20:25:05 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  347.417043][T12380] QAT: Invalid ioctl
20:25:05 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x800)

[  347.517237][T12386] QAT: Invalid ioctl
20:25:05 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r5 = syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)
epoll_pwait(r5, &(0x7f0000001940)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000001980)={0x4}, 0x8)

20:25:05 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  347.774396][T12397] QAT: Invalid ioctl
[  347.808024][T12398] QAT: Invalid ioctl
20:25:05 executing program 2:
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x200, 0x430000)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x401, 0x7, 0x1})
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:25:05 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:05 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000001900)='/dev/dsp#\x00', 0xe097, 0x420800)

20:25:06 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000080)=0x2)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:06 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  347.971574][T12405] QAT: Invalid ioctl
20:25:06 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000))

20:25:06 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)

[  348.130245][T12414] QAT: Invalid ioctl
20:25:06 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  348.276134][T12419] QAT: Invalid ioctl
[  348.340180][T12424] QAT: Invalid ioctl
20:25:06 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880)=<r4=>0x0, &(0x7f00000018c0))
fchown(0xffffffffffffffff, r3, r4)

20:25:06 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:06 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:06 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  348.550847][T12432] QAT: Invalid ioctl
20:25:06 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
r7 = epoll_create1(0x0)
r8 = epoll_create1(0x0)
close(r7)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080))
ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000180)={0x6, 0x81, 0x4})
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="fbffa4b08130ffff", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0xe, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={<r10=>r9, 0x425a, 0x200, 0x3, 0x7, 0x1f}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r10, 0xff}, 0x8)
r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x0)
write$FUSE_IOCTL(r11, &(0x7f00000000c0)={0x20, 0xcc16eea2154e459d, 0x3, {0x8, 0x4, 0x5}}, 0x20)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:25:06 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@loopback, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000001800)=0xe8)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

[  348.696483][T12440] QAT: Invalid ioctl
20:25:06 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  348.827335][T12443] QAT: Invalid ioctl
20:25:06 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
sendto$inet6(r2, &(0x7f0000001600)="beb8220409d953841c6c9a206b05cb0b71cc4279154bc0c2e6015fe454047de20abc66c9c7cb18eb114612ef704e69145e20e4b19e1b9f013d874b51b5421d69a79961e4c15cdb3bac6b9711c07f98984157d20735b345c654064ecaa435556167fe3a52c3b9c6f98b538aa6c79fd6cbf191b0b24df6090510ab4b77b264044c4672580870306323a0028b86151285eec9c60d787b738ea20e359a32e4a61a8145f851bcf0dde08eb966157ff0cac71999", 0xb1, 0xd2859c6b449f4071, &(0x7f00000016c0)={0xa, 0x1f, 0x4, @ipv4, 0x1}, 0x1c)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

[  348.919073][T12446] QAT: Invalid ioctl
20:25:07 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:07 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:07 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  349.085715][T12451] QAT: Invalid ioctl
[  349.185491][T12459] QAT: Invalid ioctl
20:25:07 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:07 executing program 2:
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000040)='\x12\x00\x00\x00\x00\x00`u\x19\x95', 0x0, 0x2)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x20000)
getsockname$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x693d182823dcd9a2)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x40, 0x105000)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x1000)
execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x400)

20:25:07 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001580)={@initdev, @empty, @broadcast}, &(0x7f00000015c0)=0xc)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:07 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  349.422122][T12467] QAT: Invalid ioctl
[  349.429305][T12465] QAT: Invalid ioctl
20:25:07 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001540)={0x1, 0x3ff})
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:07 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:07 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  349.624594][T12478] QAT: Invalid ioctl
[  349.669910][T12483] QAT: Invalid ioctl
20:25:07 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x1000, 0x2}, {0xd3, 0x4}, {0x40, 0x5}, {0x0, 0x7}, {0xffff, 0x7}, {0x7ff, 0x6}, {0x0, 0xff}, {0x20, 0x8}, {0x7, 0x7}]})

20:25:07 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000001500)={0x18, 0x1, 0x0, {0x800}}, 0x18)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:07 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  349.894570][T12489] QAT: Invalid ioctl
[  349.935888][T12492] QAT: Invalid ioctl
20:25:08 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:08 executing program 5:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:08 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  350.067439][T12498] QAT: Invalid ioctl
20:25:08 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
r2 = open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001480)={'HL\x00'}, &(0x7f00000014c0)=0x1e)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:08 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:08 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  350.268550][T12509] QAT: Invalid ioctl
[  350.280698][T12508] QAT: Invalid ioctl
20:25:08 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
open(&(0x7f0000001440)='./file0\x00', 0x200, 0x44)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:08 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

[  350.538282][T12515] QAT: Invalid ioctl
[  350.549138][T12516] QAT: Invalid ioctl
20:25:08 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:08 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000001300)=""/203, &(0x7f0000001400)=0xcb)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:08 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  350.678992][T12520] QAT: Invalid ioctl
20:25:08 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:08 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

[  350.959097][T12532] QAT: Invalid ioctl
[  350.994722][T12533] IPVS: ftp: loaded support on port[0] = 21
[  351.310581][T12533] chnl_net:caif_netlink_parms(): no params data found
[  351.413496][T12533] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.420733][T12533] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.429909][T12533] device bridge_slave_0 entered promiscuous mode
[  351.439702][T12533] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.447438][T12533] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.456574][T12533] device bridge_slave_1 entered promiscuous mode
[  351.490628][T12533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.504134][T12533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.539088][T12533] team0: Port device team_slave_0 added
[  351.549544][T12533] team0: Port device team_slave_1 added
[  351.617493][T12533] device hsr_slave_0 entered promiscuous mode
[  351.653661][T12533] device hsr_slave_1 entered promiscuous mode
[  351.692957][T12533] debugfs: Directory 'hsr0' with parent '/' already present!
[  351.746157][T12533] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.754448][T12533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.762138][T12533] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.769480][T12533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.931153][T12533] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.970384][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  351.980366][   T17] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.990417][   T17] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.005363][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  352.026824][T12533] 8021q: adding VLAN 0 to HW filter on device team0
[  352.049212][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  352.058505][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.065797][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.131532][T12533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  352.142137][T12533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.160236][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  352.169843][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.177139][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.187687][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  352.197997][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  352.207733][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  352.218473][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  352.254707][T12533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.279787][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  352.288591][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  352.395285][T12541] QAT: Invalid ioctl
20:25:10 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr_pvc=0x0}})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000001580), 0x311)

20:25:10 executing program 4:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:10 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
add_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:10 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:10 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  352.498321][T12549] QAT: Invalid ioctl
20:25:10 executing program 4:
add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:10 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000200)=0xbb)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:10 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr_pvc=0x0}})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000001580), 0x311)

[  352.716832][T12560] QAT: Invalid ioctl
20:25:10 executing program 4:
open_tree(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0/file0\x00', 0x2c00)

20:25:10 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x1800, 0x0)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:10 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:10 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:11 executing program 4:
open_tree(0xffffffffffffff9c, 0x0, 0x2c00)

20:25:11 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr_pvc=0x0}})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000001580), 0x311)

20:25:11 executing program 3:
r0 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)='\\\x00')
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:11 executing program 4:
open_tree(0xffffffffffffff9c, 0x0, 0x0)

20:25:11 executing program 3:
add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:11 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr_pvc=0x0}})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000001580), 0x311)

20:25:11 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:11 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:11 executing program 4:
open_tree(0xffffffffffffff9c, 0x0, 0x0)

20:25:11 executing program 5:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000000d0607031dfffd946fa2830020200a0009000100d8be60ffa8eacdae590000fc", 0x24}], 0x1}, 0x0)

20:25:11 executing program 3:
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:11 executing program 4:
open_tree(0xffffffffffffff9c, 0x0, 0x0)

[  353.755612][T12605] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[  353.763905][T12605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
20:25:11 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfcd0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040))
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r0, 0x0)

20:25:11 executing program 3:
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:12 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:12 executing program 0:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:12 executing program 4:
add_key$user(0x0, 0x0, &(0x7f00000001c0)="e1cac7f2dad1d9d0e251638b16539f284af504d564948dcf773a8cf039d6f34b6f7b922b535c78b2e7d3bb2a6365f69db3def46c6db54aeb94121ee4e896ecf1541c310668775dcf6c853fd206b2e0f60efc200704e92f67542ee62a127fcf02290192315cd4792162db5d4e2b42978bbbdb0288b375d6bb96a61aa558a0cf30a1b93d", 0x83, 0xfffffffffffffff8)
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r0)

20:25:12 executing program 3:
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

[  354.202238][T12626] PKCS7: Unknown OID: [5] 2.39.93.10220.703.10502.106445582.15904.7.4.13487
[  354.211684][T12626] PKCS7: Only support pkcs7_signedData type
20:25:12 executing program 5:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r0, 0x0, 0x0)

20:25:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})

20:25:12 executing program 3:
add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:12 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xd8}}, 0x0)

20:25:12 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:12 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452b468ca247d302155ff78e514a4ba6ea4005694a3cd734e62d63ae2538965735afa4dda22694133a86584e648e144e2c5be68147686aaca7a52a2ae4127fb6f643dea849e8536dadbb590560d17c1ff081b93745c4168cca1d924", 0xb5, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:12 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @rand_addr=0x1}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @empty}})

20:25:12 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:13 executing program 3:
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "f5f973dc524909c2"}, 0x38)
close(r0)

20:25:13 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:13 executing program 3:
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:13 executing program 5:
futex(0xfffffffffffffffd, 0x85, 0x0, 0x0, 0x0, 0x0)

20:25:13 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000085e049d00400000000001090224e2c740cc41b80901fbfd65db84ec0001000000000904000009030100fa08210000000122060009058103007836d971421400000000"], 0x0)

20:25:13 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:13 executing program 3:
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:13 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:13 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x1})

20:25:13 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  355.716432][T11993] usb 5-1: new high-speed USB device number 2 using dummy_hcd
20:25:13 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffffffffffa, 0x4, {0x2, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}})
ioctl$VIDIOC_S_FMT(r1, 0x40045612, &(0x7f00000001c0)={0x2})
close(r1)

20:25:14 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  355.963041][T11993] usb 5-1: Using ep0 maxpacket: 8
20:25:14 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

[  356.083343][T11993] usb 5-1: config index 0 descriptor too short (expected 57892, got 36)
[  356.092072][T11993] usb 5-1: config 64 has too many interfaces: 199, using maximum allowed: 32
[  356.101335][T11993] usb 5-1: config 64 contains an unexpected descriptor of type 0x1, skipping
[  356.110951][T11993] usb 5-1: config 64 has an invalid descriptor of length 1, skipping remainder of the config
[  356.121321][T11993] usb 5-1: config 64 has 0 interfaces, different from the descriptor's value: 199
20:25:14 executing program 5:
unshare(0x24020400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffe83)

20:25:14 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

[  356.130846][T11993] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40
[  356.140193][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.553324][T11993] usb 5-1: string descriptor 0 read error: -71
[  356.567548][T11993] usb 5-1: USB disconnect, device number 2
[  357.293015][T11993] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  357.532944][T11993] usb 5-1: Using ep0 maxpacket: 8
[  357.653366][T11993] usb 5-1: config index 0 descriptor too short (expected 57892, got 36)
[  357.661815][T11993] usb 5-1: config 64 has too many interfaces: 199, using maximum allowed: 32
[  357.670810][T11993] usb 5-1: config 64 contains an unexpected descriptor of type 0x1, skipping
[  357.679725][T11993] usb 5-1: config 64 has an invalid descriptor of length 1, skipping remainder of the config
[  357.690241][T11993] usb 5-1: config 64 has 0 interfaces, different from the descriptor's value: 199
[  357.699620][T11993] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40
[  357.709223][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.993246][T11993] usb 5-1: string descriptor 0 read error: -71
[  358.001204][T11993] usb 5-1: USB disconnect, device number 3
20:25:16 executing program 4:
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r0=>0x0, 0x0})
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080))

20:25:16 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8ca164098c95da29fff3dda6df0c3ee795fbb91575ad8db76f53b7596ded67f79b95e2287384896544a947a56427139f8780b4fbeb3954994f2dd3267619a7c1b06061b0699ef9f1b2d33ccc22ca770a8f37f4d267e259d91c452", 0x5b, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:16 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:16 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x440000000002011, r0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:16 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000000)="fc0000004a000700ab092500090007000aab80ff0000000000003693210001002952fef98656aaa79bb94b46fe1800000700020800008c0000036c6c256f1a272f2e11debb1cdfcd7c22ebc205214000000080008934d07302ade01720d7d5bbc9003e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d92c8334b3863032301748b6e4170e5bbab2ccd243f295edbce0ad91bd0734babc7c3f2eeb57d43dd16b170083df150c25880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e600000000873cf10000000000f7f1ec8846c200832a", 0xfc)

20:25:16 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xc0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x9a000, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_setup(0x5, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{<r7=>0x0}]})
ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000001c0)={r7, 0x1})
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x20000, 0x0)
r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
sendmsg$NET_DM_CMD_START(r11, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
sendmsg$NET_DM_CMD_START(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r9, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
r12 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
sendto$inet(r12, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={<r13=>0x0, 0x80000, r2})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r14=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r13, r14})

[  358.523356][T12726] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.5'.
20:25:16 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:16 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x38, 0x78, 0x57, 0x40, 0xc45, 0x612b, 0xb121, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x0, 0x0, 0x38, 0x36, 0x39}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0xac, &(0x7f0000002c00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000700)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

20:25:16 executing program 4:
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x44}, {0x6, 0x0, 0x0, 0x7fffffff}]})

20:25:16 executing program 1:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:16 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:16 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  358.813416][T11993] usb 3-1: new high-speed USB device number 2 using dummy_hcd
20:25:17 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:17 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0xd, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

[  359.024454][   T17] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  359.184054][T11993] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  359.192457][T11993] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[  359.202850][T11993] usb 3-1: config 0 has no interface number 0
[  359.209061][T11993] usb 3-1: config 0 interface 153 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  359.220237][T11993] usb 3-1: config 0 interface 153 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
20:25:17 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0))

20:25:17 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0xd, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20:25:17 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  359.233444][T11993] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=17.aa
[  359.242640][T11993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.255220][T11993] usb 3-1: config 0 descriptor??
[  359.307661][T11993] usbtest 3-1:0.153: Linux user mode ISO test driver
[  359.314694][T11993] usbtest 3-1:0.153: high-speed {control iso-out} tests (+alt)
[  359.403266][   T17] usb 6-1: config 0 has an invalid interface number: 49 but max is 0
[  359.411717][   T17] usb 6-1: config 0 has no interface number 0
[  359.418470][   T17] usb 6-1: New USB device found, idVendor=0c45, idProduct=612b, bcdDevice=b1.21
[  359.427708][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.489904][   T17] usb 6-1: config 0 descriptor??
[  359.519069][T11993] usb 3-1: USB disconnect, device number 2
[  359.560339][   T17] gspca_main: sonixj-2.14.0 probing 0c45:612b
[  360.303013][ T3381] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  360.663321][ T3381] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  360.671847][ T3381] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config
[  360.682597][ T3381] usb 3-1: config 0 has no interface number 0
[  360.688838][ T3381] usb 3-1: config 0 interface 153 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  360.699983][ T3381] usb 3-1: config 0 interface 153 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  360.713171][ T3381] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=17.aa
[  360.722266][ T3381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.732042][ T3381] usb 3-1: config 0 descriptor??
[  360.776506][ T3381] usbtest 3-1:0.153: Linux user mode ISO test driver
[  360.783496][ T3381] usbtest 3-1:0.153: high-speed {control iso-out} tests (+alt)
[  360.835121][   T17] input: sonixj as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[  360.981453][T11993] usb 3-1: USB disconnect, device number 3
[  361.036121][   T17] usb 6-1: USB disconnect, device number 2
20:25:19 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x5, 0x8b21, 0x7fff, 0x4})
setrlimit(0x0, &(0x7f0000000000)={0x1, 0x5f3})

20:25:19 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(0x0, &(0x7f0000001880), &(0x7f00000018c0))

[  361.803126][   T17] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  362.183107][   T17] usb 6-1: config 0 has an invalid interface number: 49 but max is 0
[  362.191308][   T17] usb 6-1: config 0 has no interface number 0
[  362.197616][   T17] usb 6-1: New USB device found, idVendor=0c45, idProduct=612b, bcdDevice=b1.21
[  362.206901][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.216384][   T17] usb 6-1: config 0 descriptor??
[  362.267769][   T17] gspca_main: sonixj-2.14.0 probing 0c45:612b
20:25:20 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0xd, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20:25:20 executing program 1:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400082, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:20 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags})

20:25:20 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(0x0, &(0x7f0000001880), &(0x7f00000018c0))

20:25:20 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:20 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4)
bind$isdn_base(r0, &(0x7f0000000100)={0x22, 0x80, 0x20, 0x9, 0xd1}, 0x6)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x3, 0x98}, {0x6d, 0xfa}, 0x72, 0x0, 0x40})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
write$evdev(r4, &(0x7f00000000c0)=[{{0x77359400}, 0x96285cc62180ef02, 0x1a, 0x7}], 0x18)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13)

[  362.583595][   T17] gspca_sonixj: reg_w1 err -71
[  362.588652][   T17] sonixj: probe of 6-1:0.49 failed with error -71
[  362.643747][   T17] usb 6-1: USB disconnect, device number 3
20:25:20 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(0x0, &(0x7f0000001880), &(0x7f00000018c0))

20:25:20 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = dup(r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r1, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

20:25:20 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2, 0xd, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20:25:20 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), 0x0, &(0x7f00000018c0))

20:25:21 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:21 executing program 4:
unshare(0x8000400)
r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0)

20:25:21 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x165)
listen(r1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

20:25:21 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:21 executing program 2:
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x101000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0xff, 0x6, 0x81, 'queue1\x00', 0x1})
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1400)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
dup3(r1, r3, 0xc0000)

20:25:21 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), 0x0, &(0x7f00000018c0))

20:25:21 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0})

20:25:21 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), 0x0, &(0x7f00000018c0))

20:25:21 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300))
openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0)

20:25:21 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), 0x0)

20:25:21 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  363.672999][   T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd
20:25:21 executing program 5:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xc, 0x0, &(0x7f0000000040)=0x384)

20:25:21 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:21 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), 0x0)

[  363.913013][   T17] usb 5-1: Using ep0 maxpacket: 8
20:25:22 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:22 executing program 3:
add_key(0x0, 0x0, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffff9)
getresgid(&(0x7f0000001840), &(0x7f0000001880), 0x0)

[  364.033328][   T17] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  364.041871][   T17] usb 5-1: config 0 has no interface number 0
[  364.048221][   T17] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[  364.057509][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.143890][   T17] usb 5-1: config 0 descriptor??
20:25:22 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:22 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000007300)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0)

[  364.623423][   T17] airspy 5-1:0.131: Board ID: 00
[  364.628497][   T17] airspy 5-1:0.131: Firmware version: 
[  365.714336][   T17] airspy 5-1:0.131: Registered as swradio16
[  365.720352][   T17] airspy 5-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[  365.915223][   T17] usb 5-1: USB disconnect, device number 4
[  366.683006][   T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  366.933011][   T17] usb 5-1: Using ep0 maxpacket: 8
[  367.053091][   T17] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  367.061661][   T17] usb 5-1: config 0 has no interface number 0
[  367.068038][   T17] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[  367.077485][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.087252][   T17] usb 5-1: config 0 descriptor??
20:25:25 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0})

20:25:25 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  367.383444][   T17] airspy 5-1:0.131: Board ID: 00
[  367.388490][   T17] airspy 5-1:0.131: Firmware version: 
20:25:25 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0aaa7fc37bd440c2ea6599e24d66405bb48bcfa98288ee8607032d55e3c40d11ab81fef5bb7f7d17e688c345d496f6975ffe9d2ff6bb2e38910798fc7454ae92070dbaa7e5e92da22101700"}, 0xd8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
close(r0)

20:25:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r2, 0x0, 0x31, 0x0, 0x0)

20:25:25 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sctp\x00')
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="241921b4a3a1a79775d20ede4e5cf1a22edf9bee03bde292033cbf5fcf2164ae47f73ab7944b57364fa6ee787665405c7861818abbf7ec8c65c42ea64f04efa4b2ac92d8ed31a6e18c2da6840a49976ccd0cad8286a70000000000000000000000df5780c7a9dca7ee68ce0ec57075831768ff5c1e11635dff79c4c87cd734ad0aa97234df5821df", @ANYRES32=0x0, @ANYRES32=<r9=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0xe, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={<r10=>r9, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f00000003c0)=0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000400)={r10, 0x200}, &(0x7f0000000440)=0xc)
io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0)
r11 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0, 0x0, 0x3, 0x0, 0x2}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x0)
r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r14=>0x0)
io_submit(r14, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r13, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0x0)
r15 = accept4$alg(r13, 0x0, 0x0, 0x800)
socket$tipc(0x1e, 0x5, 0x0)
accept4(r15, &(0x7f00000000c0)=@xdp, &(0x7f0000000180)=0x80, 0x80800)
faccessat(r11, &(0x7f0000000000)='./file0\x00', 0x184, 0x1000)
execveat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r16 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r17 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r18=>0x0)
io_submit(r18, 0x2000000000000046, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r17, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r17, 0x0)
r19 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x6, 0x8000)
ioctl$DRM_IOCTL_ADD_CTX(r19, 0xc0086420, &(0x7f00000005c0)={<r20=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r16, 0x40086424, &(0x7f0000002880)={r20, 0x3})
ioctl$DRM_IOCTL_NEW_CTX(r11, 0x40086425, &(0x7f0000000040)={r20, 0x1a46719f2d6c12b})

[  367.475028][   T17] airspy 5-1:0.131: usb_control_msg() failed -71 request 11
[  367.532503][   T17] airspy 5-1:0.131: Registered as swradio16
[  367.538737][   T17] airspy 5-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[  367.596331][   T17] usb 5-1: USB disconnect, device number 5
20:25:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r2, 0x0, 0x31, 0x0, 0x0)

20:25:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5], [], @empty}}]}, 0x28}}, 0x0)

20:25:25 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:25 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  367.838352][T12907] netlink: 'syz-executor.3': attribute type 23 has an invalid length.
20:25:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r2, 0x0, 0x31, 0x0, 0x0)

20:25:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x5d2b, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee)

[  368.013376][   T17] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  368.267160][   T17] usb 5-1: Using ep0 maxpacket: 8
[  368.383212][   T17] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  368.391772][   T17] usb 5-1: config 0 has no interface number 0
[  368.398106][   T17] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[  368.408222][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.417761][   T17] usb 5-1: config 0 descriptor??
[  368.913097][   T17] airspy 5-1:0.131: Board ID: 00
[  368.918272][   T17] airspy 5-1:0.131: Firmware version: 
[  369.974203][   T17] airspy 5-1:0.131: Registered as swradio16
[  369.980217][   T17] airspy 5-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[  370.179954][   T17] usb 5-1: USB disconnect, device number 6
20:25:28 executing program 2:
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x5)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:25:28 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r2, 0x0, 0x31, 0x0, 0x0)

20:25:28 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:28 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)

20:25:28 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:28 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0})

20:25:28 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="e187a48d30b3", @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x24, 0x0, [@guehdr={0x1}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x80]}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x2}], "df45960f"}}}}}, 0x0)

20:25:28 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
renameat(r0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00')
r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fff, 0x262206)
dup(r4)

20:25:28 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/123, 0x7b}], 0x1}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:25:29 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:29 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  371.073370][T11993] usb 5-1: new high-speed USB device number 7 using dummy_hcd
20:25:29 executing program 3:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r1, 0xc08c5102, &(0x7f0000a07fff))

20:25:29 executing program 5:
r0 = socket$pppoe(0x18, 0x1, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x146)

[  371.323163][T11993] usb 5-1: Using ep0 maxpacket: 8
20:25:29 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'vcan0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x29, 0x0, 0x0, {0x0, @esp_ip6_spec={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x0, @local}, @udp_ip4_spec={@loopback, @dev}, {0x0, @link_local}}}})

20:25:29 executing program 2:
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x301000)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x4000000000000)
r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x8)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4)
execveat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1900)

[  371.463475][T11993] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  371.471962][T11993] usb 5-1: config 0 has no interface number 0
[  371.478312][T11993] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[  371.487659][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.553443][T11993] usb 5-1: config 0 descriptor??
20:25:29 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r1=>0x0})
connect(r0, &(0x7f0000000080)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1, 0xffffff7f, 0x2, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a2d7aa13b5342950ee3c19bb3d1bb8078ed2db26fcc0890e93c28ad41e9740ae1cfa33019c81818acf052ecbe6620b94c2f03aee4d05b10874a8d80e90e8a81b"}}, 0x80}}, 0x0)

20:25:29 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  371.625975][T11993] airspy 5-1:0.131: usb_control_msg() failed -32 request 09
[  371.635073][T11993] airspy 5-1:0.131: Could not detect board
[  371.641072][T11993] airspy: probe of 5-1:0.131 failed with error -32
20:25:31 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0})

20:25:31 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0))

20:25:31 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:31 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
close(r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]})
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000040)=0x40)

20:25:31 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$read(0xb, r0, &(0x7f0000000040)=""/68, 0x44)

20:25:31 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  373.775894][T11993] usb 5-1: USB disconnect, device number 7
20:25:31 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x822, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
pipe(&(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000300), 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

20:25:32 executing program 2:
clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000000), &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080), 0x35, 0x0, &(0x7f0000000180)=""/132, 0x84, &(0x7f00000000c0)=""/90}, 0x40)
ptrace$cont(0x1f, r0, 0xd48c, 0xffff)
r1 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x3, 0x2)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000002c0)=0x100000)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000300))

20:25:32 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00')
exit(0x0)
fspick(r0, &(0x7f0000000000)='./file0\x00', 0x0)

20:25:32 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  374.107557][T13019] input: syz1 as /devices/virtual/input/input10
20:25:32 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x86, 0x20)

20:25:32 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000380))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  374.293577][T11993] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  374.330212][T13032] mmap: syz-executor.2 (13032) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  374.533050][T11993] usb 5-1: Using ep0 maxpacket: 8
[  374.653188][T11993] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  374.661631][T11993] usb 5-1: config 0 has no interface number 0
[  374.668072][T11993] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[  374.677277][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.687028][T11993] usb 5-1: config 0 descriptor??
[  374.885619][T13022] input: syz1 as /devices/virtual/input/input11
[  375.163172][T11993] airspy 5-1:0.131: Board ID: 00
[  375.168597][T11993] airspy 5-1:0.131: Firmware version: 
[  376.254250][T11993] airspy 5-1:0.131: Registered as swradio16
[  376.260260][T11993] airspy 5-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[  376.459950][T11993] usb 5-1: USB disconnect, device number 8
20:25:35 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0)
execveat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x400)

20:25:35 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:35 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000380))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:35 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48)

20:25:35 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x822, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
pipe(&(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000300), 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

[  377.046651][T13050] input: syz1 as /devices/virtual/input/input12
20:25:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000100)=0xfffffffc, 0x4)
shutdown(r1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)

20:25:35 executing program 5:
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@nfc_llcp, 0x80, 0x0, 0x0, 0xfffffffffffffffd}, 0x0)

[  377.266498][T13057] Dead loop on virtual device ip6_vti0, fix it urgently!
[  377.306467][T13058] Dead loop on virtual device ip6_vti0, fix it urgently!
20:25:35 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/91, 0x5b}], 0x1, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0x0, 0x6, 0x4, 0x2}, 0x10)
lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000000c0)='wlan1&@-nodev\x00', 0xe, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x4, 0x40000)
recvfrom$packet(r3, &(0x7f0000000240)=""/75, 0x4b, 0x60, 0x0, 0x0)

20:25:35 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:35 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000380))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:35 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff})

20:25:35 executing program 4:
unshare(0x40400)
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @dev}, 0xa)

20:25:35 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b80)}}], 0x1, 0xfffffffffffffffe, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000000001)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0)
r1 = getpid()
r2 = getpgid(r1)
getpid()
getpgid(r2)
prlimit64(r1, 0xe, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x4, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x80005, 0x0)
sendmsg(r4, 0x0, 0x0)
open(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r6, 0x10099ba)
sendfile(r5, r6, 0x0, 0x1000000000000fe)

20:25:35 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:35 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v2={0x3, 0x2, 0xa, 0x1ff, 0x5e, "fbb2a79b7a1645c486e6510fed0ee338923acc34014855346fe5f42710426a668666c3a5abe7397909a3a3ac66d3fad7cdbf05a5447383ff7b4c492630b304716fac9c42312e7cd957353d2560d1851d08ba487ffa6f7c40dbfe12ea060a"}, 0x68, 0x1)

[  377.788003][T13083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
20:25:35 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002e0007031dfffd940101830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0)

20:25:36 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x822, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
pipe(&(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000300), 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

20:25:36 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0x0])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:36 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x6, "d813c4f33efe0a590254e857cde3c5aca91865f3ba43859035ac272c0571e9e3", 0x7, 0x0, 0x800, 0xe5d400000, 0xff, 0x1, 0x1, 0x7, [0x2, 0x9, 0x6, 0x80]})

[  378.017725][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  378.145558][T13101] input: syz1 as /devices/virtual/input/input13
20:25:36 executing program 4:
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{0x0, 0xfffffffffffffff7}, {0x20000000001, 0x1}}, 0x0)

20:25:36 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '!:ppp0!security(em1}cgroup\x00'}, &(0x7f0000000080)=""/115, 0x73)

20:25:36 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:36 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0x0])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:36 executing program 2:
openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x50080, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, <r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000300)="60f5", 0xfffffffffffffe41)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000000)={0xa, 0x0, 0x10003})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000080)={0x8001}, 0x0, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380))
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
close(r6)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080))
fcntl$setlease(r6, 0x400, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r8 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x40000)
execveat(r8, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000)

20:25:36 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x300, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xfffffffffffffde2, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221d"], 0x0}, 0x0)

20:25:36 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b80)}}], 0x1, 0xfffffffffffffffe, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000000001)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0)
r1 = getpid()
r2 = getpgid(r1)
getpid()
getpgid(r2)
prlimit64(r1, 0xe, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x4, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x80005, 0x0)
sendmsg(r4, 0x0, 0x0)
open(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r6, 0x10099ba)
sendfile(r5, r6, 0x0, 0x1000000000000fe)

20:25:36 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x1fc2e5582ce9f31)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000000c0))
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6d, 0x70193cea0d244517)
setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x3, 0x4)

20:25:36 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  378.974380][T11993] usb 5-1: new high-speed USB device number 9 using dummy_hcd
20:25:37 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x822, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
pipe(&(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000300), 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000ac0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c)

20:25:37 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0x0])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:37 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380))
uname(&(0x7f0000000000)=""/228)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

[  379.093387][T13143] input: syz1 as /devices/virtual/input/input14
20:25:37 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  379.213307][T11993] usb 5-1: Using ep0 maxpacket: 32
20:25:37 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x3e6, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xfffffe34}])
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000034b55412a8fd434aaa2c85159b425b0e842f910402ea20e575430a8ff3b8925e183a534070e48547bb20f28a76c0e78c6b0cb9a3e6667ce7e8b46598bdb00624a5d06975c0230fd51826385c209462ace21f630ced6ec81448eca1bccfdb9e6ae4ac12130073c6eadbb70fa27b5112cb7d0566851b92ba1aba3d7471f433f950ceb0057d3988c682ce16f701705f8344ff535388", @ANYRES16=r2, @ANYBLOB="020026bd7000fbdbdf25110000003400070008000200800300000c000400b0000000000000000c0003000900000000000000080001000000010008000200000000006c0005002c000200080001001100000008000200010000000800010003000000080003000900000008000100030000002c00020008000200090000000800030001000000080002000000008008000400ff7f000008000200ae3300000800010069620000080001007564700040000200080001000000008008000100f7ffffff0800020002000000080002000600000008000200b10c00000800020002000000040004000800010001000100"], 0xf4}, 0x1, 0x0, 0x0, 0x1080}, 0x40c0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000009, 0x100010, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfff, 0x44200)
ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000000c0)={0x6})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)

20:25:37 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  379.337256][T11993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.348542][T11993] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  379.361676][T11993] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.40
[  379.370934][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.416823][T11993] usb 5-1: config 0 descriptor??
20:25:37 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0xbaa763a9d29f7b58)
write$cgroup_int(r0, &(0x7f0000000040)=0x10000000003, 0x12)

20:25:37 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  379.897542][T11993] wacom 0003:056A:0300.0004: unknown main item tag 0x0
[  379.905103][T11993] wacom 0003:056A:0300.0004: unknown main item tag 0x0
[  379.912746][T11993] wacom 0003:056A:0300.0004: Unknown device_type for 'HID 056a:0300'. Assuming pen.
[  379.924009][T11993] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.0004/input/input15
[  379.969039][T11993] wacom 0003:056A:0300.0004: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0
[  380.096854][   T17] usb 5-1: USB disconnect, device number 9
[  380.863071][   T17] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  381.113116][   T17] usb 5-1: Using ep0 maxpacket: 32
[  381.233315][   T17] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.244487][   T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  381.257540][   T17] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.40
[  381.266707][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.276419][   T17] usb 5-1: config 0 descriptor??
[  381.567324][   T17] wacom 0003:056A:0300.0005: unknown main item tag 0x0
[  381.574533][   T17] wacom 0003:056A:0300.0005: unknown main item tag 0x0
[  381.582151][   T17] wacom 0003:056A:0300.0005: Unknown device_type for 'HID 056a:0300'. Assuming pen.
[  381.593283][   T17] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.0005/input/input18
[  381.611432][   T17] wacom 0003:056A:0300.0005: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0
20:25:39 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00\x00\x00\b\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0000000042087a0fb03026608036b6070000000008009200407d66ad75f4a92d4554de82fff80000402f"]})

20:25:39 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b80)}}], 0x1, 0xfffffffffffffffe, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000000001)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0)
r1 = getpid()
r2 = getpgid(r1)
getpid()
getpgid(r2)
prlimit64(r1, 0xe, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x4, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x80005, 0x0)
sendmsg(r4, 0x0, 0x0)
open(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r6, 0x10099ba)
sendfile(r5, r6, 0x0, 0x1000000000000fe)

20:25:39 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3ff, 0x40000)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
fcntl$setsig(r1, 0xa, 0x1a)

20:25:39 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:39 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000380))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
gettid()
sendmsg$unix(r1, &(0x7f0000001540)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000001480)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}, 0x0)

[  381.702411][T11993] usb 5-1: USB disconnect, device number 10
20:25:39 executing program 3:
r0 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$packet_buf(r0, 0x111, 0x0, 0x0, &(0x7f00000002c0))

20:25:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_MARK={0x4, 0x1d}]}, 0x24}}, 0x0)

20:25:40 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0@'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr="b6eeb94dabff920469d573bd92064dbf"}}}}]}]}, 0x6c}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x114, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000080}, 0x10)

20:25:40 executing program 3:
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local})
r1 = socket$kcm(0x2b, 0x4000000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast})

20:25:40 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000380))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  382.117989][T13199] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  382.134722][T13198] Started in network mode
[  382.139306][T13198] Own node identity 00000000000000000000ffffac1e0003, cluster identity 4711
[  382.148406][T13198] Enabling of bearer <udp:syz0@> rejected, failed to enable media
[  382.181310][T13201] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
20:25:40 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:40 executing program 4:
sysinfo(&(0x7f0000000000)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags})

[  382.517975][T13211] device team0 entered promiscuous mode
[  382.523980][T13211] device team_slave_0 entered promiscuous mode
[  382.530784][T13211] device team_slave_1 entered promiscuous mode
[  382.540956][T13211] 8021q: adding VLAN 0 to HW filter on device team0
20:25:40 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002b80)}}], 0x1, 0xfffffffffffffffe, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000000001)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0)
r1 = getpid()
r2 = getpgid(r1)
getpid()
getpgid(r2)
prlimit64(r1, 0xe, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x4, 0x0, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x80005, 0x0)
sendmsg(r4, 0x0, 0x0)
open(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
r5 = dup(r3)
bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r6, 0x10099ba)
sendfile(r5, r6, 0x0, 0x1000000000000fe)

20:25:40 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
dup3(r0, r1, 0x180000)

20:25:40 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:40 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000380))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:40 executing program 4:
sysinfo(&(0x7f0000000000)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags})

20:25:40 executing program 3:
keyctl$restrict_keyring(0x10, 0xfffffffffffffffb, 0x0, 0x0)

20:25:41 executing program 4:
sysinfo(&(0x7f0000000000)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags})

20:25:41 executing program 3:
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0x14, 0xd}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

20:25:41 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x400)

20:25:41 executing program 4:
sysinfo(&(0x7f0000000000)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @reserved}, 0x10)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags})

20:25:41 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x169, 0x11, 0x7e}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:25:41 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:41 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:41 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0x0])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:41 executing program 2:
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001040)="f1dcea3a1de6fd63411f378659959c0977c8b5ff171d081f1588e220d34ef5bf16d575c5186277be50c7ed470e01151f8e33848999f0af0a807a586399f7cd86e4df57d9a95c1b839ba56ac119d305b69368c149722a071d8f854e2f76a78957ff70061efd44418c1f074540e332d4f183b18db6c783e6dca73d8db4353f2a829f222da1cdecc39dd3579b7c99b748c0288d850a132ad4a926c1272555efad8f203eab7e8d6d80985073ab6239f18c4d4d6d7ade98aa6cff03dd25b252e1155d4c13146228c6cfe7148feb82bb626a939f6d7cb4e8b3ff9b37997bfd92bd38d491281af9a7f3b122f0b93e2cc5dd8aa1d45b7738981ca17d901f81d876a636abd02dac425f09df378581990cb72323289f20b814571d5d68f5953f76092274642fe8fb1dc0516f9c73eca762f0316a66e98933031aba5ba7925c18d01139a913347cbdae25da0142d6fbb5bebeb98ed39ec1e523bbc6eaeb9be1bf9a40f126032ba5fe07f11bd19d3b03e47374ba61b9539683cab7cd720fb1812a55177961298dc3172a65c2d1e3ca0c0208c2ea0bc9de3f79baf29956f19b61d1e466dcdfad0e3a507a99577b455eeaa06bdd42ff478ba298c13dbae85232a36e1abcd626a0cc63746c28afad6d303922df4e8dd8c54500f7beea9c5fa54a5dd5e3d2f0900f1bc201d4d29e682ff32f5bf428a2cddd9df649825cfc818782f91a9d8871d84ea95adf95f321ff84e07436dad8c0ae48a29f9d017a18e3203942a930483aa74bd34c4529e8d0addfb1afacba48403be6114d30910d4c7f539d51ecbb632cccad0a517fd185ad301d4fbb882f3b51c2948a2d05ba6b992124e1a647caa723fa80b089fc0309b92a2b0ad268192fddfb9dcbe0a51524fa3be7261d24b8c26a79778fc95b9b2d2e8bc3d69fc939562d98f05c124cb01a15cd515e226f9b009071efa9361823170d1df1970522ebb76b927215cf83c2a4a0750acbac1916126699ffb792c096067e47085978e4524c91c8a9515a1a3cf00f8c54abbeed581e790f78e772a2c4abae3932fde5d96e9b1bb0b99ca1cd15fea7488ff11a54b1e3d632ee1c4875d7efdc95d1fa2d5b548f15bf25bc2338783f5f200261062688bbee1dfb5cb702c6c74900f7af24c46492b3cd47b84f012edde76ce5782cad3e778114cc0f2b46d785bf6f6f0ddb7eb298eecda009818a18ed272ac03cd193ffd671fd92c2366f64c44bd1a7a57bb2feedca4b99a0689e542067221fc04a49713ba4422b86c7fd65679496aed4ce8015ea2cd06201c3cd765589d51d20ee6fdb73ff40cd6c1ac0728b1c57a34d13e02e558f6410b18e59d4ea01f9b9d357a063ddde6ebe1813d675de763eb00eb0208dd17420ec953b5c7863798df88983cdfbcbadba556d68857ffec1f25660adc7b0432943edb7602d955e01a0d594cfc9404a7bc8bff4ec1b676c79eda679918531f3e31dbd90b50ab291d82ec8746948182ab5b58b8931906127eccd513c84e5751594b362fc5375ec6327ef4a548508965423c2e80aba23d4cd46165f14d421d6e1455fb2c258ada2d30646f16927790724713d76fbe8177d39edab0b3573ab6cbf84baa0316038ea7da76b0ae94eabfb3995151fe6e6918624ce46d4cf6c0492b1768a5378b6590bb1e7e83400c189e441b6dadab48195532386a624d8a91eab2d3594cafa71d42b0cad40394a94de88514f101499ae91638d142d038c3b70cf40d87c3a9fbd29fb6f195d64cd3368e2f74aecb0b6f0d78aa6ee3d649753bd2428649e1667ba19a095cc135079cf49c741b419ec24cf8444a37cf338dbb6bb81abddeddd8e78afbf08e184b85393a898978ce2d450514b1030d9e0874058bb95a9f35f06e6a36d8071b341780f29dc04ef240c9ad59e18219b9c5aed2f2ef3a4b105dd5f89d7cf227b15d50779688605ac13337cfa37309d7f69d8401fc57c081ce397f99a346056dc5aef0d115bfb675add7f17573326ff337d9f1a2faeb33eae06dcce6fe7146f6e90b3bf007cab7c13c642997fbf8ddeca2157f5107e7322d20f57e35c3e99837a4d46e3f66ca9f41d2ac756016ad59976de54e6b4fd93cb529de8b07c3702b2cab034ee4ed5adab73830402019c23909006c832324d48530fc8aded7483662c137c0c5d52072f302469310a30282da5bded6f606459fd9e57a5c4cb7b7da36f469c35c78f7b1998601a9c06f165ee8e36469292687320790db8797710adcaae8abed26a0b0e5486436348cd6f6b236c416309a126d6da1f2d3312c3fb023477223b72eebdf96e3e1f7ac4d14ca53e3c9c68bb4f99ff9979e8cad1c43104e9c175ae314daa68dda7bed26f202b2a958843aaab2b91f6d111fb0d407c6bcd20892723c8f3a03744086270efe68893bbe1b584efc79322528cc2737905f22d6261e51113c01d89869893108653cb74bbd37025587c57a1d96879d7caf9b639545340e2e83e355ff8cc6068bcce960ebe26801184035a52675f22fed77cb95aa8d577783ac8f3bc328909e9a3616e09d689b3baa1e50771b35c65b8342b7b05533a52fd26baf543e24fed67b95d790de0318373a0c102ff4a5a70dc553bc41a615ea793ab5fc5d15518c3f9692f67e737709dc72269bdc8327debe17ab087880cb83855b482716f9e1bd3471f36937f47d7f316744da4787b1a1c0d57534afc65461e20200ee241983106ca9f21167d151a9a563671a665fd869a1ed856c398aa063b8423ba556efac03608a7151b84eebc268111f82293dbf60e3fd078be58b536f68b8c69301927ffa0f6ef733c22cae1cbbe5232859992a27b2b0a20872cca982d60326ad752083345f9ef222ddd3988d0e0fd17ece99ea6d33d372bb6ab7d2cb734d0857f06cf7b256497563c473972f6ce6d4b4767df049961ccff9f088d50d7fa9d9751b066d0862d0f3596519eca18a6e4dab7890e34edd61835957bbfabe1b761ee97afabbedd75de57d8e7abf1646fc5dead0d2465e071e7ddb3ce144aeda9257571ecf957e71cebaad8b52ec9a6a8b519dc6f0df5c097139bb437ee8d7429dd03c9bd10db35b81348b8388a9b8db0b2898103baa5ea8042afcee02b9fd86cc04280fbec40e9e2eb48c1e605ec6a45264991308d28f449cba3184ffb11f8986fcef291d1fa70d2101c1efd95519eb2db2668ca930fc971bb217826e44090fc0bfc9a63405174eb4b354b1db40d43d88cc461a964044186755aef4d6660ab99d49d4f31f10017c223c0be718d33b1a6fc64a7d29392ee9f6a89839ea81f83098f8bd4cdff72151fb598745bdbfd763076f4382a19dfa75126c66feaa4dfac01e5193ab0566f9da9a5af4453a240bc65bbbc41fe0ecdbcb4f298b280bd22699f38b99adf972e4e83d255e78957c7048e8e2ce624495f101b4866b02cef80c7cc62ab5cbebffb5d79f58ca89568720114ebdf03131881b88af4d8621996322e3810785ad71c7d9f53b0aa960551c966fbd67d0ab379d721639372d1ce9f3e411fc897b92f4b617013805f225f27ef276ce613466dabee08c7255b188343b471bfc1be6701fc99da6892d19e8e417f96c66eb26297e9da6f4d410fcef524ef926693e2325b6a9a0ce99b90dedd0a8de1bd91f6302b27003fe83be21974a784bf3d102c7dced13389dd13a7ac4e8074ddd63c152467707b9e1f403cc43ef3095ea99a4e47415e5fd8977353a3a87275bfaa19d103d95729add5d55b5bc17f59748dea3ac3117a3432540a2edfebf3b3f1d7ea7f2079e4318f1b83725e74da2fc1a226e0dc4cf5d08c1f51deb84ef70827aba71a346bf3acd276af8a0868404a2a6203828fafd2f5f696e1ccc00d0bfba1f417be867e3cfcef87316378aa503e738c70486a040a60f40c0e6b27ff9745e6f739a407c6250cf983af349611ed9c180470afd15649e1a61b10de93a31ed165244842c121a7e61a1c1760b2c92e1aeb5608eead4ed8d3bd5b9603f6d3e28f35b8b02412bf845ee3d88cb3e0daee0225508b8387022698d2500559dfaec646369a6379f610de9aa444fe8cce908e1070e9d2d77864b8e566ea548b5a794c36e1ea6dfbf7ac45a0e54ef163a10a091e0e93476803f5d96fecd19594cce8f5300071f1920d56a368d49ddd8ecc880b76bd8162bf4d1fecf95044b3f7ce3972505f37975e0bf62c9d21b3e5c0c85c2da4090cc5e2ca8adb91567725f3deaba9fdb0e51f44819e7c8fa9e82f934c7d30749ad9adb19e1dac8b80c2dd18edd07154cd02b8576db4631a7c3c73bf98177f5e1249a29663c6c28386ef1058c9ff84eeb003e473c3e9d7016b9af473f829d54c0a759ca21ade9f473acac7ad6603939515c2d413a22726f93750cd67d1961124affd5069545e21f4726337af1307c9166e0c64d1f133f12e60f8ab1edc23633705f759cb7af3aab90336169c1a0f0f24d7df9c346f613f2832a7f922817f69df9d75cd9f576246528980dfd041ab97ebdba08978932bf5195727b3ae08746db46e119d6f61de892c45e7448adc4dfce94dfa968727bd9a8b1891817836c243d0f9fa85dea06a550534950689693bd2ed4e22dec8bb21b488662bd381b55d051e8a9b20e256fbd3afe3b4160e7f3f31224c8559cd2b824f3ca604353b8dc7ff33f6f3e295a46284f03acd1b2c0d8f1fa70ab963d702577294f9357918c00a49af50b485742295dfce984d67b481032577412134222057db8ece6b2d3f58b7420621860b3f18ad881a0646bcf56668dcf81ce8a257307a6a1b782198cdc100a3e11adebb36283b14974a71d63fc1faf4c85c4d3a1bec21d9c4d51a97c8664829fb7be0ce4a834735fc83c9aaf0f5630e9e974e9adf5fdcc02a2a1534bfaa2fadbc3c6723117bb9c3c76a5c80925dcebba34fd28a94803f792d704473121a6a5e6dd21fd10eece0a200756d1cdbf182f825bb67f57d8ae60a3a5326f8a7937259e080958ae2bd9590a05afcc0a069ab8d068f7c2d2e38f963a74cc142e3968bb6efa3af45a6ed187c9f8159fb0375ff185f6b8d52ee8bd0ffa6a3208ee4883b3328b4cf9c2e62dde9c80c1f2957c46907fa946ff907129f2489b6c7e1b332b278bf51efd3d240cde25b50ab841b10ca0b0f08d9dd79f37bc804577905540de6c6ee41bf7f061ef2fdf00a887962cc45ee54e5ff527f20003d80323ee4ce699647fe3ef8f055f98b68138f9dc8feccf9dd3fbe4ff47071a9406c4c51307c860788bd9be7b8ee3d80d1328e61c547c773461cc8a03915446ce724bf167a5cb5c006c09ba89d04872af87c6487e18d22298f354c6f54406f2b08d5a86e8f9d5a5a62969a88064ddfd13893ba32f639532a5d35800a0d1e0db2aee7c70daac815d660fc172ceb8e0dc225a98e914b1f30927403e939366c6387a3953102d232c5b8d01259f16cf258e0d5343ba9a9f81f5b28824a9398574f166650f4e0a0deb5c9879295b5524f02e64f083dccd661f363d4c445aabdfe558f09895f85e611e310fd0202ea6f81db776b02d272a512e42c8ed1a8a596815d9187f72583a03a6c16f43f096b737415ffced6cd9af265d28e0d891f721b11acd41a367fbddc21b50effffc5c98e0c1df9c446b2094797e462ffa4a63d3fe868a89b4954272e86486b5561fa84d761505904329596553c57aa88630ed6c3892661efce97fc4f47d64b250a161ab9d787a4288c9e535f850169f9f9e534686529a0fc62a9eff2a06900e79a9ca41b88d8d17a1944489f0797d07aafcea1c16bce87f096ee01a365898eff4723ba47224c068818024ddec3", 0x1000, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x208, 0xffffffff, 0x80000000, <r2=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x8, @local, 0x20}}, [0x80000000, 0x2, 0x8, 0xff, 0x640, 0x1, 0x3, 0x4, 0x9, 0x2, 0x0, 0x400, 0x4, 0x5, 0x8]}, &(0x7f0000000340)=0x100)
keyctl$instantiate(0xc, r0, 0x0, 0x0, r1)
r3 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="2afeba936bd6e2a7c4ffe9c558bb88ef75a0ef", 0x13, r1)
keyctl$set_timeout(0xf, r3, 0x80)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:25:41 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x169, 0x11, 0x7e}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:25:41 executing program 4:
r0 = socket$unix(0x1, 0x4000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000140)=0xffff8001, 0x4)
dup3(r0, r1, 0x0)

20:25:41 executing program 5:
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0xfffffffffffffed3, 0x2000, 0x0, 0x0)

20:25:41 executing program 4:
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4fb1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
fcntl$setpipe(r0, 0x407, 0x0)
sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffe54, 0x0, 0x0, 0x9a)
splice(r1, 0x0, r0, 0x0, 0x8001, 0x0)

20:25:42 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x169, 0x11, 0x7e}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:25:42 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
r2 = inotify_init1(0x0)
fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3)
r3 = gettid()
fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x0, r3})
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x0, r3})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x6, 0x87, 0xef0d})

20:25:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$FICLONE(r2, 0x40049409, r0)

20:25:42 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:42 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x52, 0x2}, @ramp})
write$evdev(r0, &(0x7f0000000040), 0x1b3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000061c0)=""/4096)

20:25:42 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0x0])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:42 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x169, 0x11, 0x7e}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:25:42 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='#:mime_typeW#)\x00', 0xfffffffffffffffb)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000))

20:25:42 executing program 3:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4040ae79, &(0x7f0000000240))

20:25:42 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0x44, 0x2, 0x90, [0x0, 0x0, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x2}]}, 0x108)

20:25:42 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x52, 0x2}, @ramp})
write$evdev(r0, &(0x7f0000000040), 0x1b3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000061c0)=""/4096)

20:25:42 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8)

20:25:42 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x20100}}]}, 0x24}}, 0x0)

20:25:42 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0x0])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:42 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)

20:25:42 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x52, 0x2}, @ramp})
write$evdev(r0, &(0x7f0000000040), 0x1b3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000061c0)=""/4096)

20:25:43 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20800, 0x0)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000200))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
r3 = inotify_init1(0x0)
fcntl$setstatus(r3, 0x4, 0x72109c5fef5d34d3)
r4 = gettid()
fcntl$setownex(r3, 0xf, &(0x7f0000000180)={0x0, r4})
ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000100)={&(0x7f0000000180)="ac03c08d102148d016f4b7e33335ba2b16766a95c7a7d3d9d62879d8501f5211fb64a0f3735abe84ee7b888862476871293bef8c528d21c22f1abe6fc8f7bb3944b6699af6a98f9f0a15ad09f88da63cc1398b84f9ccf1b2421235a09f42160fe8b9a1e9bdd7628c77090e", 0x6b})
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000040)={0xfff, {{0x2, 0x4e23, @empty}}}, 0x88)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0xca, 0x1, 0x0, "59faf4b7ee4083f1408f520c275ad832", "62e299d56894d2030ae71ef64ea53d1f46e48aca560b18dc0ccde16f8621cd3ed7d9e3f9fcce3bbcdb24011c68966fa3b9e915029c7f7fba4d6fe1b7a536c3f2ccfbc95a5d06c5f7e4bbaf3127bd55b6789f59a123c795d29ce5568d066490e587dbfb49dc425c5058b293f36dd267ff6795ec1862443ba53f9c4703b5b34258ae5601bb52e3dcf022ab973da8b662d41ef7e085b8b8c687bd5eca3b3f31a1a0d208171c657fdcb5ef1d8fa2635a717b95612b0a8d"}, 0xca, 0x0)

20:25:43 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00')
read$FUSE(r1, &(0x7f0000001200), 0x1000)
sendfile(r0, r1, &(0x7f00000000c0), 0x5)
sendfile(r0, r1, 0x0, 0x10001)

20:25:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x7, 0x156)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0)

20:25:43 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x52, 0x2}, @ramp})
write$evdev(r0, &(0x7f0000000040), 0x1b3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000061c0)=""/4096)

20:25:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x2, 0x3, 0x1000000000000007)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x52f38bf2bf5babb)
sendto$unix(r1, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0)=@abs, 0x6e)

20:25:43 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x6)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x6)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x20)
close(r3)

20:25:43 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40801, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3e, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
bind$pptp(r1, &(0x7f0000000500)={0x18, 0x2, {0x993, @multicast2}}, 0x1e)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000)
readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/26, 0x1a}], 0x8)

20:25:43 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:43 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  385.458585][T13358] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it!
20:25:43 executing program 5:
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x21, 0x0}, 0x20000000)

20:25:43 executing program 4:
r0 = epoll_create1(0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'teql0\x00', 0x8802})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080))

20:25:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000000802, 0x0)
write(r0, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TCFLSH(r0, 0x540b, 0x2)

20:25:43 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/83, 0x53)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xda, 0x27}, 0x90)

20:25:44 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:44 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:44 executing program 4:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f)

20:25:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000000802, 0x0)
write(r0, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TCFLSH(r0, 0x540b, 0x2)

20:25:44 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0x81, 0x57, 0x40, 0x1b80, 0xe755, 0x1e97, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0x1b, 0xd5, 0xc6, 0x0, [], [{{0x7, 0x5, 0x83, 0xe0d5d1e99ce80e0d}}]}}]}}]}}, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x2000, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={r1, r3, 0x6, 0x2}, 0x10)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0xac, &(0x7f0000000080)={0x0, 0x0, 0x1, "9c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x0)
close(r6)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080))
write$binfmt_script(r6, &(0x7f0000000440)={'#! ', './file0', [{}, {0x20, '/dev/dlm-control\x00'}, {0x20, '/dev/dsp\x00'}, {0x20, '&'}], 0xa, "343e25bff449ada579582a2484051470f15353c9cab169c63b358e3dd80dfc966dec1e3d49336f2cedb1305877d4ee0a1d128162b70da76bfc91686d5e3625b9284bfcb9ed618c99e4c9e535"}, 0x76)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
r8 = dup2(r4, 0xffffffffffffffff)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000004c0)={0x2, 0x0, [{0x5, 0x3, 0x0, 0x0, @msi={0x3, 0x23b, 0x2}}, {0x7fff, 0x4, 0x0, 0x0, @sint={0x7, 0x7b3}}]})
ioctl$TCGETX(r8, 0x5432, &(0x7f0000000300))
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x60, 0x22, 0x89, {0x89, 0x8, "3108702fdeb6473457a644e7c9aa48b9057286b82da48af62c7d4c498ecb521913304d5d632a8347dd8e7238403b46ed79a637bbf40ddcbc6f1711650e9b84677b975b90698c7e7159e31bd3cd6f712414ede9a67debb3a69fa11d15a62b3b861f8630d7a777bd99b91953bcd8aca42367bfb1beefd01ea39f70a8fdca7f6b9ee3352bcca3cc15"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x7, 0x98, "e9f2294fc180474af7a46e4e292dc507cf8f13b1528284d65253b6c2e8d89830de3f9407edb9698d11b2b43a6f0afee6fdc0255da4d16b2f57530b321700ed0f9ee3f4cfe985acabdd18d8f4d1d2230660b7fcabbe504a15ff373e5ac5468542ce2baf84ab2171d75de0c75bcd9688345bcd33d49c5fe125fe930752e7c6d1ec99d82a954676c4a1022b51d828677c1c29a695b75c2488e7"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}})

20:25:44 executing program 4:
unshare(0x2000200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
setns(r0, 0x0)

20:25:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000000802, 0x0)
write(r0, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TCFLSH(r0, 0x540b, 0x2)

20:25:44 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:44 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
unshare(0x2000400)
ioctl(r0, 0x80184151, 0x0)

20:25:44 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02)

20:25:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000000802, 0x0)
write(r0, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TCFLSH(r0, 0x540b, 0x2)

[  386.603056][T11993] usb 3-1: new high-speed USB device number 4 using dummy_hcd
20:25:44 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:44 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:44 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x1a, 0x201, 0x0, 0x0, {0x90181}}, 0x20}}, 0x0)

20:25:44 executing program 4:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, 0x0, 0x0)

20:25:44 executing program 5:
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

[  386.960047][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  386.964003][T11993] usb 3-1: config 0 has an invalid interface number: 97 but max is 0
[  386.977892][T11993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.988486][T11993] usb 3-1: config 0 has no interface number 0
[  386.994773][T11993] usb 3-1: config 0 interface 97 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  387.005963][T11993] usb 3-1: New USB device found, idVendor=1b80, idProduct=e755, bcdDevice=1e.97
[  387.015521][T11993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.034427][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  387.104725][T11993] usb 3-1: config 0 descriptor??
[  387.170060][T11993] em28xx 3-1:0.97: New device   @ 480 Mbps (1b80:e755, interface 97, class 97)
[  387.179315][T11993] em28xx 3-1:0.97: Audio interface 97 found (Vendor Class)
[  387.443391][T11993] em28xx 3-1:0.97: unknown em28xx chip ID (0)
[  387.483351][T11993] em28xx 3-1:0.97: Config register raw data: 0x9c
[  387.603086][T11993] em28xx 3-1:0.97: AC97 chip type couldn't be determined
[  387.610413][T11993] em28xx 3-1:0.97: No AC97 audio processor
20:25:47 executing program 3:
r0 = socket$inet(0x2, 0x6, 0x0)
connect$inet(r0, &(0x7f0000000040), 0x2)

20:25:47 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000ffcffc))

20:25:47 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:47 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x13, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x200000010, 0x9, 0x0, "616052eabcab615670bbf4ee8488674b05ca0157fb6dc65964e2243bbf3da078"})

20:25:47 executing program 2:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8000000, 0x4400c0)
open(&(0x7f0000000040)='./file0\x00', 0x100, 0x80)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:25:47 executing program 0:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10)
r2 = dup(r0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @link_local}, 0x10)

[  389.415628][T11993] usb 3-1: USB disconnect, device number 4
[  389.422415][T11993] em28xx 3-1:0.97: Disconnecting em28xx
[  389.472002][T11993] em28xx 3-1:0.97: Freeing device
[  389.488997][T13461] device lo entered promiscuous mode
[  389.531368][T13460] device lo left promiscuous mode
20:25:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0)

[  389.575891][T13461] device lo entered promiscuous mode
20:25:47 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x30, 0x3a, 0x0, @ipv4={[0xfc], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2, @loopback}}}}}}}, 0x0)

[  389.616432][T13460] device lo left promiscuous mode
20:25:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

20:25:47 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:47 executing program 0:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10)
r2 = dup(r0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @link_local}, 0x10)

20:25:47 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x30, 0x3a, 0x0, @ipv4={[0xfc], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2, @loopback}}}}}}}, 0x0)

20:25:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0)

[  389.947795][T13488] device lo entered promiscuous mode
[  389.992278][T13487] device lo left promiscuous mode
20:25:48 executing program 0:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10)
r2 = dup(r0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @link_local}, 0x10)

20:25:48 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x30, 0x3a, 0x0, @ipv4={[0xfc], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2, @loopback}}}}}}}, 0x0)

20:25:48 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0xb, &(0x7f000095dff8), &(0x7f0000000180)=0x4)

[  390.260744][T13504] device lo entered promiscuous mode
20:25:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0)

[  390.314778][T13503] device lo left promiscuous mode
20:25:48 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:48 executing program 0:
r0 = socket(0x100000000011, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10)
r2 = dup(r0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @link_local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000440)={0x0, 0x1, 0x6, @link_local}, 0x10)

20:25:48 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="cd390b081bf2", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x30, 0x3a, 0x0, @ipv4={[0xfc], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff83, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2, @loopback}}}}}}}, 0x0)

20:25:48 executing program 4:
socket$kcm(0x2b, 0x2000000000000001, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000140)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x1000000a, 0x63, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55, 0xffffffff00000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0)

[  390.587682][T13521] device lo entered promiscuous mode
20:25:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, 0x0}, 0x0)

[  390.627371][T13520] device lo left promiscuous mode
20:25:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="1898b67cb32bb093245ac10888810c53"}, @gre_common_policy=[@IFLA_GRE_LINK={0x8}]]}}}]}, 0x68}}, 0x0)

20:25:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x5c}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]})

20:25:48 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd", 0x2}], 0x1, 0x0)

20:25:48 executing program 4:
socket$kcm(0x2b, 0x2000000000000001, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000140)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x1000000a, 0x63, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55, 0xffffffff00000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0)

20:25:49 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:49 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x7)

20:25:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@dev}, 0x2c6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff45, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:25:49 executing program 4:
socket$kcm(0x2b, 0x2000000000000001, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000140)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x1000000a, 0x63, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55, 0xffffffff00000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0)

20:25:49 executing program 5:
unshare(0x40600)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f0000000080)={0x38, 0x4, [0x0]})

20:25:49 executing program 4:
socket$kcm(0x2b, 0x2000000000000001, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000140)=r0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x1000000a, 0x63, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x7fffef55, 0xffffffff00000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x2}, 0x0)

20:25:49 executing program 0:
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = epoll_create1(0x0)
r3 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267})
timerfd_settime(r3, 0x1, &(0x7f0000005000)={{}, {0x0, 0x1c9c380}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000ca0000)={0x2001})
epoll_pwait(r2, &(0x7f0000a1efac)=[{}], 0x1, 0x0, 0x0, 0x0)

[  391.630687][T13554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  391.655048][T13554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  391.696978][T13554] device team0 left promiscuous mode
[  391.702985][T13554] device team_slave_0 left promiscuous mode
[  391.712341][T13554] device team_slave_1 left promiscuous mode
20:25:49 executing program 5:
unshare(0x40600)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f0000000080)={0x38, 0x4, [0x0]})

20:25:49 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc)
r2 = dup(r1)
getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000))

[  391.874332][T13554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
20:25:50 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={[], [], @remote}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

20:25:50 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
setreuid(r1, 0x0)

20:25:50 executing program 5:
unshare(0x40600)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f0000000080)={0x38, 0x4, [0x0]})

20:25:50 executing program 0:
unshare(0x400)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80081)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20:25:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@dev}, 0x2c6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff45, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:25:50 executing program 4:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000009ec0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x8, @empty}, 0x80, 0x0}}], 0x1, 0x0)

20:25:50 executing program 5:
unshare(0x40600)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f0000000080)={0x38, 0x4, [0x0]})

[  392.738530][T13599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:25:50 executing program 4:
r0 = socket$inet(0x28, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x2, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'sed\x00'}, 0x7)

20:25:50 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x20)
exit(0x0)
fchown(r2, 0x0, 0x0)
close(r2)

20:25:50 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
clone(0xa0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:50 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00')
preadv(r1, &(0x7f00000017c0), 0x3cc, 0x1f000000)

[  392.857445][T13599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
20:25:51 executing program 4:
r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r0, &(0x7f00000004c0)="3161d417452c8f6d46", 0x9)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r0, &(0x7f0000000200), 0xff8)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

20:25:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@dev}, 0x2c6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff45, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:25:51 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000)=0x7b)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x800000141042, 0x0)
ftruncate(r4, 0x200006)
sendfile(r0, r4, 0x0, 0x8000fffffffe)

[  393.430081][T13622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
20:25:51 executing program 4:
syz_usb_connect(0x0, 0x57, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100004bc0961012290100b4ef000000010902450001000000000904cd0000e662f100052406000005240000000d240f010000000000000000000524010002052406000005248000000d240f010000000000000000008d8ad6239660bec0371c7909eb87348656ba9ba56781ba2482dfacc77290de106d17d33cb3dd9269b2007bc94a9b013240a77813842fdb4bde82938189c8d54d4514dda7cd887cf083e65873d9ffcf14df812161772d7ba38c1192d7f5616a66c0445ba0360c8025096fa42218896bab3144d582d51b00f5d5672de98cf4f5e3de049f1a99e469aa1e6476a4dad474d51245fc9db2f86b897f483b5fe49f0f627ee8551572bbc8000071abb725414b88f9c7c143a041d87a6408b8f18e7cbd791ad0423a3c0058be4529c51cf037c3ded64327df2220691c1a7ca45a3a937929ae9c207c41404a271fa26450d16923b166d311124bc9610df78e98b695bcbc0406e085d1f03408bdec00ba05218fc8f80339a8fb640efc34164a941503ce279ab793077360a4f18d892de2c7671477010000000000003d1b443b74804d486519d5a6c2c6d08b2f91dee1f6490d44bd1384b8d10d3a26081333901faf7dad73b0155c4ad338dafe4ee3a6b51503d31f1d258fb62b814714d943971e8e8a820e7b4b3ee4c8fd893df501f6965a5595e814a2fac62f4504192e9228448ed342171312a8f03c290f2d6bb578667b6b3881cd56e4c6a8c933288352d9e078e671347bf9c2c09c26c3b496ad4646812e8c10b401d12612027b0d70662256fb40c5962908803db4e69af4b4aa2ada111ef8b2764cd7f32d32b9fcd3f9077096f4fd8053cc"], 0x0)

[  393.553760][T13622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
20:25:51 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:25:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@dev}, 0x2c6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff45, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

20:25:51 executing program 0:
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000082505a1a44000010203010902640002013200000904000001020d0000052406000105240000200d240f0106000000000000000106241a00d00008241c99060000000905810300003f00000904010000020d0000090401020000000905030200"/118], &(0x7f00000003c0)={0x0, 0x0, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

[  393.883168][T11993] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  394.064675][T13641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  394.154903][T13641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
20:25:52 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  394.213003][   T17] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  394.333221][T11993] usb 5-1: Using ep0 maxpacket: 16
20:25:52 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x20000804}, 0x10)
write(r0, &(0x7f0000000080)="1c0000001a009b8a14e5f4070009042402000000ff02000000000000", 0x103)

20:25:52 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000004c0)={0x10000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf0ff7f}], 0x1}, 0x0)

[  394.455380][T11993] usb 5-1: config 0 has an invalid interface number: 205 but max is 0
[  394.464876][T11993] usb 5-1: config 0 has no interface number 0
[  394.471112][T11993] usb 5-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=ef.b4
[  394.472999][   T17] usb 1-1: Using ep0 maxpacket: 8
[  394.480401][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
20:25:52 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  394.538970][T11993] usb 5-1: config 0 descriptor??
[  394.585813][T11993] cdc_acm 5-1:0.205: More than one union descriptor, skipping ...
[  394.773342][   T17] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  394.782452][   T17] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.793221][   T17] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  394.804333][   T17] usb 1-1: config 1 interface 1 has no altsetting 1
[  394.813960][T11993] usb 5-1: USB disconnect, device number 11
20:25:53 executing program 1:
mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000001000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

20:25:53 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001000000010000000300000003000000"], 0x18}, 0x0)

[  395.113238][   T17] usb 1-1: string descriptor 0 read error: -22
[  395.119690][   T17] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  395.128919][   T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
20:25:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)=ANY=[], 0x0)
clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb)

[  395.235793][   T17] usb 1-1: selecting invalid altsetting 1
[  395.273438][T13669] dns_resolver: Unsupported server list version (0)
[  395.453506][   T17] cdc_ncm 1-1:1.0: bind() failure
[  395.464941][   T17] cdc_ncm 1-1:1.1: bind() failure
[  395.513573][   T17] usb 1-1: USB disconnect, device number 9
[  395.594046][T11993] usb 5-1: new high-speed USB device number 12 using dummy_hcd
20:25:53 executing program 5:
r0 = socket$kcm(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'})

[  395.833046][T11993] usb 5-1: Using ep0 maxpacket: 16
[  395.953669][T11993] usb 5-1: config 0 has an invalid interface number: 205 but max is 0
[  395.962106][T11993] usb 5-1: config 0 has no interface number 0
[  395.968479][T11993] usb 5-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=ef.b4
[  395.977730][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.992394][T11993] usb 5-1: config 0 descriptor??
[  396.035692][T11993] cdc_acm 5-1:0.205: More than one union descriptor, skipping ...
[  396.203123][T11779] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  396.235029][   T17] usb 5-1: USB disconnect, device number 12
[  396.442996][T11779] usb 1-1: Using ep0 maxpacket: 8
20:25:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:25:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)=ANY=[], 0x0)
clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb)

20:25:54 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001000000010000000300000003000000"], 0x18}, 0x0)

[  396.642560][T13689] dns_resolver: Unsupported server list version (0)
[  396.643588][T11779] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  396.658219][T11779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.669233][T11779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9
[  396.680366][T11779] usb 1-1: config 1 interface 1 has no altsetting 1
20:25:55 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1, 0x0)

20:25:55 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x800)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020002010580fc0904000001020d00060a240600015329d8f55c05240081000d240f016e010000ff0f07003f06241a0100481524120500a307a898fad72201a607c0ffcb7e392a0524010601090581039e018000400904010000020d003f0904010102020d0002090582026b0102fc1f09050302f10204001f000000000000"], &(0x7f0000000480)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0a060003010007ff0700"], @ANYBLOB="d5000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="050fd50003bb10031092ef8e80e89746d79ef76fbddba798c921fd3e4b0dbcbe0179a68a15038f2a3bbc6d0b4b96ef9837779d4ccdd5d05c896d4bf5fd5c676a27d872e283cc6a96669490730b658854e2d385381f344f0b4616f0ed920e1cd885c2d0ebb4bdb1ff58687d5c56fb2e3ddcf89a4b53d83d687f8f20119107da0ff7b030a32f32823a29f31481047ee4279b591dc4893befd6e2cc31b493c86cb2803e438d7cbd9b2de2c930e6b06cef2734d3fd60bfc6f7b56ef83575bc723eb60a10030208000605fbe30b10010a080081546dd601"], @ANYBLOB="06000000e9000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="e903893baa04ebb92011269a40143f11022c809872f858d581541ad5f8384ad907c6c66e9740f0bd08007bfea0a78340be9b9aa6a3f7fa8502fa3fe7db1ec712d3b2f91d760bdfc8f3d41703682195b189e5da492c6df00997d1a70a83c85135decd29814b843c5533c07a6120ee36e689c033e2c9caa2a80c685934c719b9f1a2d050c4f02a138f431cf6d312f4ced9cf34c6291c547e0291d9d6568b7623fffebb804f503ecde632c173bd833ff13d7ae7323abc5ba1d4acd8942e108e81eda8eb291748de598ae6b36d6a658f510a692f57cec149e61d6170af233e104e8f70d0ddc36e60c5b128"], @ANYBLOB="04000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="04033804"], @ANYBLOB='\t\x00\x00\x00', @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="04031204"], @ANYBLOB="c6000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="c603ba26ccdbd491bd54c03a68c27cfd1ffec0baf9da3a6df0ab53321173742f2e92b90c8c81a2cd2e4d4d928dabe12faaba47ae6f6a66a776da7ab7a3c05aabbe0e57e9abdc14b2bff925440126007757acf88e53cb09dd6aaf88555ca3620977708463185198656ebcc6140dbcdc8453ca06f151be9f7a0a7e028b583e57389407553ef0323df1e9810f0220357c260b2f3b76cfa2601470b1eea9494832e550ea95a350620b1d43db3438bcf2c243fd2de8dfc383255ddce3be87291a9277bdbf58f39b17"], @ANYBLOB='=\x00\x00\x00', @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="3d03e7907752b2a9f643c345b83a0a55b14795f0d89389c0d01391cf89d5164a3fba809e2f31fc34de2f3e56e6eaed7cb52ff96ba55342acdf95ff5c75"], @ANYBLOB="c8000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="c8035cdb0acbcdaf89ed4ec63818c1e5bfd5f6041c7ab6fc970f11f254f08d2f7c1a98c534a0d971192a21fdb7e4aacce1ee128d1fc6d76e65be915cdb94c2975982b69b5406e3a781474188e4f971993653226f6fae159ba8485bfa26a3912f76fc87e55f0bc345ccf879c032c364aea846590c8b50a6dff9984c48c60ed16ed427cd61d504f6d38af65b727b496e29df2b0fb20fa934914c031891858ada586f732e502911d39a3cc92d664378cf36a96316c2195e01a1c5b43a0f5c54f07ed0baeda7b7c01b98"]])
syz_usb_ep_read(r0, 0x13, 0x7c, &(0x7f0000000500)=""/124)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000100)={0x4})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x102, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x4003b, &(0x7f0000000440)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
io_getevents(r5, 0x1, 0x9, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000840)={<r6=>0x0, 0x80000001, 0x7f, 0x3}, &(0x7f0000000880)=0x10)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r7, 0x10, &(0x7f00000007c0)={&(0x7f0000000780)=""/5, 0x5, <r9=>0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=r9, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000008c0)={r6, 0x9}, 0x8)

20:25:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="c6ef157d03adc939054af9ca0900000000000000ef5a9721bc1a082c00000000", 0x490, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x45f, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r1, r2}, &(0x7f0000002700)=""/83, 0xffffff84, 0x0)

20:25:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)=ANY=[], 0x0)
clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb)

20:25:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001000000010000000300000003000000"], 0x18}, 0x0)

20:25:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[  396.976303][T11779] usb 1-1: string descriptor 0 read error: -71
[  396.982983][T11779] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  396.992605][T11779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.033953][T13707] dns_resolver: Unsupported server list version (0)
20:25:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000003c0)=ANY=[], 0x0)
clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb)

20:25:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001000000010000000300000003000000"], 0x18}, 0x0)

[  397.113545][T11779] usb 1-1: can't set config #1, error -71
[  397.135307][T11779] usb 1-1: USB disconnect, device number 10
20:25:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x116, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00222900000003cced4b290b0f28c3b0a3016484230bccf904c30000000000000000c0"], 0x0}, 0x0)

20:25:55 executing program 4:
personality(0x1bb2baf3005ac133)
mkdir(&(0x7f000002b000)='./file0\x00', 0x0)
creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0)
r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
pkey_mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1, 0xffffffffffffffff)

[  397.286700][T13723] dns_resolver: Unsupported server list version (0)
[  397.294974][T11993] usb 3-1: new high-speed USB device number 5 using dummy_hcd
20:25:55 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x10001}})

20:25:55 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
write$binfmt_aout(r0, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20403}}, 0x20)

20:25:55 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000001)
r1 = accept4(r0, 0x0, 0x0, 0x0)
shutdown(r1, 0x10000000000001)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080), 0x8)

[  397.569465][T11993] usb 3-1: device descriptor read/64, error 18
[  397.733514][T11779] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  397.963724][T11993] usb 3-1: device descriptor read/64, error 18
[  397.973048][T11779] usb 1-1: Using ep0 maxpacket: 8
[  398.093201][T11779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.104464][T11779] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  398.117526][T11779] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00
[  398.126679][T11779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.140540][T11779] usb 1-1: config 0 descriptor??
[  398.235122][T11993] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  398.503971][T11993] usb 3-1: device descriptor read/64, error 18
[  398.634001][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.641217][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.648439][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.655795][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.663964][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.671047][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.678189][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.685319][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.692386][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.699538][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.706666][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.713934][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.721036][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.728301][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.735460][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.742543][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.749750][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.756918][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.764093][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.771164][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.778351][T11779] wacom 0003:056A:0116.0006: unknown main item tag 0x0
[  398.809205][T11779] wacom 0003:056A:0116.0006: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.0-1/input0
[  398.845210][T11779] usb 1-1: USB disconnect, device number 11
[  399.013831][T11993] usb 3-1: device descriptor read/64, error 18
[  399.133451][T11993] usb usb3-port1: attempt power cycle
[  399.622973][T11779] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  399.853253][T11993] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  399.883235][T11779] usb 1-1: Using ep0 maxpacket: 8
[  400.003341][T11779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.014440][T11779] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  400.028384][T11779] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00
[  400.037519][T11779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.051550][T11779] usb 1-1: config 0 descriptor??
20:25:58 executing program 2:
r0 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100)

[  400.144558][T11993] usb 3-1: device descriptor read/64, error 18
[  400.364416][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.371761][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.379176][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.386277][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.393446][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.400503][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.407640][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.414760][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.421823][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.430470][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.437659][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.444784][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.452029][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.459896][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.467563][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.474720][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.481783][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.490325][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.497483][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.504810][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.511944][T11779] wacom 0003:056A:0116.0007: unknown main item tag 0x0
[  400.527383][T11779] wacom 0003:056A:0116.0007: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.0-1/input0
[  400.570286][T11779] usb 1-1: USB disconnect, device number 12
20:26:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="c6ef157d03adc939054af9ca0900000000000000ef5a9721bc1a082c00000000", 0x490, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x45f, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r1, r2}, &(0x7f0000002700)=""/83, 0xffffff84, 0x0)

20:26:21 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x1000000000000009)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000001c0)=0x1, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0)

20:26:21 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x0, 0x0, 0x6, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x10000}, 0x12)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000002c0)=@v1={0x0, @aes256, 0x0, "e18c93d23162fe66"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:26:21 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000001)
r1 = accept4(r0, 0x0, 0x0, 0x0)
shutdown(r1, 0x10000000000001)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080), 0x8)

20:26:21 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0)
connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x1, 0x2)

20:26:21 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x116, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00222900000003cced4b290b0f28c3b0a3016484230bccf904c30000000000000000c0"], 0x0}, 0x0)

20:26:21 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000001)
r1 = accept4(r0, 0x0, 0x0, 0x0)
shutdown(r1, 0x10000000000001)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080), 0x8)

20:26:22 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd77e4ef05f7e1, 0x0, 0x0, 0x35a)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x14, 0xc2, &(0x7f0000000200)="089e8532c75b12c08861a98fa92cb47aa2b5118a1664789edd3ad2756b98e0cca8352f1f4899d889966df6ef83dd7b26b4d1048a5077598db4c46f35d83b15550fc450318b505fee04d3efd9cfa79519ae2820f0134ea61bc0820f7211be06489ce25bea5274608775b8065006430d20130d73fd1523e8de0b71cd84138a5fbbbe18c3570333183f72b0510cbc494bd5cc5c26f513f61c358ec6fe0b9e0d81c7d45026206d3d707f2dcce2954ce48531a9aa06a7d6a84cc26cffded405fbef025fb9"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffff6)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)

20:26:22 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x100000000}, 0x28, 0x1)
r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2)
accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x1fffffffe, @host}, 0x10, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)

20:26:22 executing program 4:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000001)
r1 = accept4(r0, 0x0, 0x0, 0x0)
shutdown(r1, 0x10000000000001)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080), 0x8)

[  424.123100][T11993] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  424.221994][T13785] kvm: emulating exchange as write
20:26:22 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x800)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file1\x00', 0x8, 0x3)
r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x400382)
unlinkat(r0, &(0x7f0000000140)='./file1\x00', 0x400)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockname(r1, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80)

[  424.366675][T11993] usb 1-1: Using ep0 maxpacket: 8
20:26:22 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2})

[  424.483390][T11993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.494656][T11993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  424.507689][T11993] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00
[  424.516908][T11993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.589529][T11993] usb 1-1: config 0 descriptor??
[  425.083790][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.092041][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.099362][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.106524][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.113614][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.120755][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.127872][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.134993][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.142039][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.149199][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.156318][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.163417][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.170780][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.177924][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.185074][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.192164][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.199299][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.206433][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.213575][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.220663][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.227818][T11993] wacom 0003:056A:0116.0008: unknown main item tag 0x0
[  425.300175][T11993] wacom 0003:056A:0116.0008: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.0-1/input0
[  425.388868][T11993] usb 1-1: USB disconnect, device number 13
20:26:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="c6ef157d03adc939054af9ca0900000000000000ef5a9721bc1a082c00000000", 0x490, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x45f, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r1, r2}, &(0x7f0000002700)=""/83, 0xffffff84, 0x0)

20:26:48 executing program 4:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x200000}, 0x6, 0x0, 0x0, 0x0, 0x1b3}, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000780)={0x2, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, @msi}]})
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:26:48 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1f7a)

20:26:48 executing program 3:
unshare(0x2000400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETAW(r0, 0x541f, 0x0)

20:26:48 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7fffffff})

20:26:48 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x116, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00222900000003cced4b290b0f28c3b0a3016484230bccf904c30000000000000000c0"], 0x0}, 0x0)

20:26:48 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0)
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000000))
ptrace(0x10, r2)
wait4(0x0, &(0x7f0000000180), 0x0, 0x0)

20:26:48 executing program 2:
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x87c7d425ff4adf3a)

20:26:48 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000000000)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80)
bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80)
bind(r0, 0x0, 0x0)

[  450.642997][   T17] usb 1-1: new high-speed USB device number 14 using dummy_hcd
20:26:48 executing program 4:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007bdf86401aeb0128e8280000000109021b00010000000009048000016e95db00090584050000000000"], 0x0)

20:26:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:26:48 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@remote}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0)

[  450.883644][   T17] usb 1-1: Using ep0 maxpacket: 8
[  451.027819][   T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.038934][   T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  451.052148][   T17] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00
[  451.061406][   T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.076633][   T17] usb 1-1: config 0 descriptor??
[  451.145006][ T3381] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  451.523275][ T3381] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  451.531690][ T3381] usb 5-1: config 0 has no interface number 0
[  451.538025][ T3381] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  451.549295][ T3381] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=28.e8
[  451.558509][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.576050][ T3381] usb 5-1: config 0 descriptor??
[  451.602387][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.609797][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.617243][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.624412][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.631487][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.638588][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.645687][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.652742][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.659992][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.667352][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.674543][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.681603][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.688714][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.695897][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.703414][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.710487][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.718443][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.725601][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.732689][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.740807][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.747936][   T17] wacom 0003:056A:0116.0009: unknown main item tag 0x0
[  451.771403][   T17] wacom 0003:056A:0116.0009: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.0-1/input0
[  451.823817][   T17] usb 1-1: USB disconnect, device number 14
[  451.911561][T11993] usb 5-1: USB disconnect, device number 13
[  452.695824][T11993] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  453.064348][T11993] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  453.072776][T11993] usb 5-1: config 0 has no interface number 0
[  453.079099][T11993] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  453.090342][T11993] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=28.e8
[  453.099585][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.109749][T11993] usb 5-1: config 0 descriptor??
[  453.358706][T11993] usb 5-1: USB disconnect, device number 14
20:27:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000180)="c6ef157d03adc939054af9ca0900000000000000ef5a9721bc1a082c00000000", 0x490, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x45f, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r1, r2}, &(0x7f0000002700)=""/83, 0xffffff84, 0x0)

20:27:15 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x2f, 0x7, "689ab1fc900aef025e2e0a3012ad77edd9198337cf68e0919936fe48ff30d5bc8ba0cad515017d"}, &(0x7f0000000080), 0x400)

20:27:15 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@remote}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0)

20:27:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_DST={0x14, 0x1, @mcast1}]}, 0x34}}, 0x0)

20:27:15 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x116, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00222900000003cced4b290b0f28c3b0a3016484230bccf904c30000000000000000c0"], 0x0}, 0x0)

20:27:15 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)
ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000000)={0x1fffd})

20:27:15 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@remote}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0)

20:27:15 executing program 1:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000100000000010000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

20:27:15 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)
ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000000)={0x1fffd})

20:27:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x100)

20:27:15 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@remote}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "e5ded35713882b9ed9bc5c5a1c66b92f789b133cc773ecd14dfa9409c75a3dcd1a150600"}}]}, 0x160}}, 0x0)

[  477.669978][T13892] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  477.678462][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  477.688266][   T17] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  477.790324][T13900] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  477.799177][T13900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
20:27:15 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x5, 0x4)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x9)

[  477.934151][   T17] usb 1-1: Using ep0 maxpacket: 8
[  478.053660][   T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.064903][   T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  478.077983][   T17] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00
[  478.087339][   T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.104798][   T17] usb 1-1: config 0 descriptor??
[  478.588355][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.595689][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.602797][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.609974][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.617157][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.624286][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.631353][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.638573][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.645867][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.653091][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.660237][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.667380][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.674570][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.682093][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.689275][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.696529][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.703659][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.710732][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.717892][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.725081][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.732174][   T17] wacom 0003:056A:0116.000A: unknown main item tag 0x0
[  478.743344][   T17] wacom 0003:056A:0116.000A: hidraw0: USB HID v0.00 Device [HID 056a:0116] on usb-dummy_hcd.0-1/input0
[  478.889470][   T17] usb 1-1: USB disconnect, device number 15
20:27:41 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)

20:27:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x81}]}}]}, 0x4c}}, 0x0)

20:27:41 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)
ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000000)={0x1fffd})

20:27:41 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc32, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:27:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x3}})

20:27:41 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x33)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xde)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:41 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x38, 0x0, &(0x7f0000000280)=[@acquire, @release, @decrefs, @dead_binder_done, @acquire_done], 0x0, 0x0, 0x0})

20:27:42 executing program 3:
rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa30000}}, 0x20, 0x0, 0x0)

20:27:42 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e)
ioctl$FS_IOC_FSSETXATTR(r3, 0x80487436, &(0x7f0000000000)={0x1fffd})

20:27:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x5d5f, 0x5, 0x10001})
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:42 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f4}, 0x20005700, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

20:27:42 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
r0 = socket$inet(0x2, 0x80a, 0x0)
r1 = socket$inet(0x2, 0x80a, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x10000000080002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602007a00fde80001084000040d0005000005000000060000ff", 0x29}], 0x1)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x49249249249255c, 0x0)

20:27:42 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)

20:27:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8)
setuid(r3)
r4 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000000500)='em0cpus1\x95\xeb\xe6\xa2\xa5\x12\xb7V\xda\x8eo\x9ce\x0e\x8a\x9e\xc6!\xae\xe8\xf9I\xe4e\xb2q\xb9\xd9c\xc1n\xddg\xf17\xbf\xac\x19\xf8\xb0\x84\xad4\xc4\xa27\xe0\xdf\xfd\xf1\x98\xdb\x19\x97\x89\x9f\xf6Rr\xde7\xcb\xed&0\xa4\xb4):\x15\x8a\x91@<\x00\xbb\xbfm\xc8H\x95\xbb\xdea\x96Q\xef\x8a\x01\xf0<_\xfb\xb0\x98\xbc\x81#.\xc9\x93\xf1m\x91\xc5P\xe834\xcd\x14\x01\xe9K\x16\xde\x87I\xbf\x0f\xeb\xbe\xb4\x914\xa7>\xac\x16\x01\x9a\xe98]\xb1\xd4 \xcb\\\x1e1\xc3\xc91[,2w\xa2\xfa\x04<\xd0\xea\xe4\xb4', 0xfffffffffffffff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r5=>0x0}, 0x0)
keyctl$chown(0x4, r4, 0x0, r5)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$P9_RSTATu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="820000007d010000006c000101050000000200000000050000000000000000c6fd0000000c002f64a89c2f6e756c6c623004d20528512ee09e000c002f64657682d6b96de22b0665a52f6e7565762a2d0e006f6f655f3b46c96daf39d5a1c5a38a73636f72655ff09e71f9adbb3430c3497f3c238edf390aa31eff4bd3c3a78aeaa2ea6c7d09de00"/151, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r6], 0x82)
preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000240)={0x3f, 0x6, 0x29, "79f626d8195c190e2aa337dfc1f006da99bc49278cb63184fa522d1bf5c25a0fc8bfe73d37be1b7603c1638fee0a5e6858905a325339b285ac3cc17f", 0x1d, "c70435f97c1564e4dfbbd7fb13b8fab0a0a8cef08ff1307c51656e1542b1b75609e7b30eee71b915557a7d427ca1e3b142cfc6942cbc706e1dbf918e", 0x18})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
io_setup(0x4, &(0x7f00000004c0)=<r8=>0x0)
io_submit(r8, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r7, &(0x7f0000000000)="98", 0x3e80000000}])

20:27:42 executing program 4:
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r3})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r4})
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x0, 0x3})

[  504.336290][T13957] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[  504.376089][T13957] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
20:27:42 executing program 5:
io_setup(0x3, &(0x7f0000000540)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x1401})
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x2}])

20:27:42 executing program 2:
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x2, 0x1f, 0x20, 0x48}, 0x101c, &(0x7f0000000180)={0x5, 0xf, 0x101c, 0x4, [@generic={0x1003, 0x10, 0x4, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x1, 0xfa}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x6, 0x3}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc09}}]})
syz_usb_disconnect(r0)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x12000, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x74cc9e27bbee4391}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)={0x11c, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0xfffffef4, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x0, 0x5, [@TIPC_NLA_MEDIA_PROP={0xfffffffffffffd4d, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x15}, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x19}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x97d6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9bee}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

20:27:42 executing program 4:
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x80000000}, 0x1c)
listen(r0, 0x0)
accept$alg(r0, 0x713000, 0x715000)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)

20:27:42 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

20:27:42 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)

[  504.853965][T11993] usb 3-1: new high-speed USB device number 8 using dummy_hcd
20:27:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000140))
ioctl$KVM_SET_CPUID(r2, 0x4188aea7, 0x0)

20:27:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="d3aaffae741a32f50378452634721df90ca2c482fdc0751cca0c8a732c8e91")
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffffffffffe15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))

20:27:43 executing program 4:
syz_usb_connect(0x0, 0x409, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)

[  505.133192][T11993] usb 3-1: Invalid ep0 maxpacket: 512
[  505.217923][T14005] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  505.303971][T11993] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  505.443251][ T3381] usb 5-1: new high-speed USB device number 15 using dummy_hcd
20:27:43 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r1, 0x203ffffd, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)

20:27:43 executing program 1:
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="5500000018007f5300fe01b2a4a280930a600000ffa84302910000003900090035004004130000001900150007000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0xfe67}], 0x1, 0x0, 0xfffffffffffffc9c}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000200), 0x3e1, &(0x7f0000000100)}], 0x2b2, 0x0)

20:27:43 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20:27:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="d3aaffae741a32f50378452634721df90ca2c482fdc0751cca0c8a732c8e91")
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffffffffffe15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))

[  505.563187][T11993] usb 3-1: Invalid ep0 maxpacket: 512
[  505.576936][T11993] usb usb3-port1: attempt power cycle
20:27:43 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x5101, 0x0)

[  505.683076][ T3381] usb 5-1: Using ep0 maxpacket: 8
[  505.883772][ T3381] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=82.5b
[  505.893079][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[  505.901209][ T3381] usb 5-1: Product: syz
[  505.939757][ T3381] usb 5-1: config 0 descriptor??
[  506.253780][ T3381] snd-usb-audio: probe of 5-1:0.0 failed with error -71
[  506.262650][ T3381] usb 5-1: USB disconnect, device number 15
[  506.313355][T11993] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  506.552929][T11993] usb 3-1: Invalid ep0 maxpacket: 512
[  506.703128][T11993] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  506.952911][ T3381] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  506.963769][T11993] usb 3-1: Invalid ep0 maxpacket: 512
[  506.969693][T11993] usb usb3-port1: unable to enumerate USB device
[  507.192913][ T3381] usb 5-1: Using ep0 maxpacket: 8
[  507.393372][ T3381] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=82.5b
[  507.402590][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[  507.410902][ T3381] usb 5-1: Product: syz
[  507.416532][ T3381] usb 5-1: config 0 descriptor??
[  507.713702][ T3381] snd-usb-audio: probe of 5-1:0.0 failed with error -71
[  507.722538][ T3381] usb 5-1: USB disconnect, device number 16
20:27:45 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)="da", 0x1}], 0x2}, 0x0)

20:27:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x7c, 0x0, 0x4)
r5 = dup2(r0, r2)
dup3(r5, r1, 0x0)

20:27:45 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="d3aaffae741a32f50378452634721df90ca2c482fdc0751cca0c8a732c8e91")
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffffffffffe15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))

20:27:45 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0xfffd, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0xd68, 0x0, 0x920, 0x0, 0x920, 0x920, 0xc98, 0xc98, 0xc98, 0xc98, 0xc98, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x8d8, 0x920, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d3, 0x2, 0x2, 0x3}}, @common=@unspec=@u32={0x7e0, 'u32\x00', 0x0, {[{[{0x8, 0x1}, {0x10000}, {0xb4, 0x2}, {0x3, 0x3}, {0x3}, {0x9, 0x3}, {0x7, 0x2}, {0xfffffffa}, {0x9, 0x2}, {0x7, 0x2}, {0x5, 0x2}], [{0x50f7, 0x2}, {0x8001, 0x5}, {0x8, 0x7fff}, {0x3cbe, 0xbf}, {0x6, 0x1}, {0x0, 0x6}, {0x10001, 0xbf}, {0x4, 0x2}, {0x8000, 0xff}, {0x16, 0x2}, {0x2, 0x3ff}], 0x8, 0x8}, {[{0x5}, {0x7, 0x1}, {0x6}, {0xd7}, {0xce, 0x1}, {0x17, 0x3}, {0x1}, {0x2, 0x2}, {0xfffffff8, 0x1}, {0x4, 0x3}, {0x9}], [{0x7fff, 0x1}, {0x2, 0x800}, {0x6, 0x99d}, {0x10000, 0x9a8}, {0x80, 0x6}, {0x7fff, 0x2}, {0xffffffff, 0x7c5}, {0x100, 0x8000}, {0x5, 0x2}, {0x67a, 0x7f}, {0xfffffff8, 0x3}], 0x5, 0x9}, {[{0x7fffffff, 0x2}, {0x59}, {0x1, 0x3}, {0x8, 0x1}, {0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x280}, {0x401}, {0x4a8c, 0x1}], [{0x7, 0x69f17b81}, {0x4, 0x9}, {0x80000000, 0xbd3}, {0x1, 0x6a}, {0x401, 0x5d}, {0x3d05, 0x80000000}, {0xffff6130, 0xf46}, {0x4, 0x2}, {0xffffffff, 0x7ff}, {0x80000000, 0x7}, {0xeaf, 0x80a}], 0xa, 0x8}, {[{0x2, 0x2}, {0x521}, {0xb4, 0x3}, {0x7}, {0x2, 0x1}, {0x6, 0x1}, {0xea1, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x7, 0x2}, {0x1000, 0x3}], [{0x5, 0x9a3}, {0xffffffff, 0x1ff}, {0x10000, 0x9}, {0x9, 0x7}, {0x80000001, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0xf0}, {0x618, 0x5}, {0x5, 0x6}, {0x3, 0x2}], 0x0, 0x1}, {[{0x1ff, 0x3}, {0x9}, {0x3, 0x1}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x1}, {0xacf, 0x2}, {0xd53, 0x8fe03731a714aeda}, {0x0, 0x3}, {0x1d, 0x2}], [{0x9, 0x8}, {0x7, 0x49b}, {0x80000, 0x6}, {0x0, 0x479}, {0xfffffffe, 0x80}, {0x3, 0x2}, {0x7, 0x4de7}, {0x67b5, 0x3}, {0x0, 0x4}, {0x81, 0x5}, {0x4, 0x1}], 0x5}, {[{0x0, 0x1}, {0x3ff, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x101, 0x1}, {0x800}, {0x7ff, 0x3}, {0x3}, {0x1, 0x1}, {0xf29, 0xa84daf960100f7ed}, {0xb024, 0x1}], [{0x5, 0x101}, {0x3, 0x2}, {0x9, 0x4e76c7a8}, {0x927d, 0xfff}, {0x5, 0x5}, {0x0, 0x81}, {0x20, 0x800}, {0x4, 0x200}, {0xfffffffb, 0x3}, {0x76f5e68a, 0x1}, {0x8a7, 0x81}], 0x9, 0x9}, {[{0x4}, {0x7}, {}, {0x1, 0x2}, {0x10000, 0x3}, {0xd2, 0x3b9a2f0063d6b5c1}, {0x9, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0xfffffc01, 0x2}, {0x81ea, 0x3}], [{0x5, 0x6}, {0x7fff, 0xfff}, {0x9}, {0x1, 0x2}, {0x9, 0x9}, {0xfffffffe, 0x3}, {0x9fd8, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x1000, 0x80000000}, {0x4f0, 0x7}], 0x0, 0x8}, {[{0x1000}, {0xfffffff8, 0x175aadbf4ee4d948}, {0x8001, 0x4}, {0xfffffff7, 0x2}, {0x659f, 0x3}, {0xfff}, {0x6, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x40, 0x3}], [{0x9, 0x100}, {0x7fff, 0x2}, {0x552d, 0x9}, {0x7f, 0x2}, {0x166654cf, 0xf37}, {0xfffffff8, 0x6}, {0x9, 0x2}, {0xff}, {0x8, 0x5e6}, {0x10, 0xc000}, {0x288, 0x2f8}], 0x1, 0x8}, {[{0xfffffffb, 0x2}, {0x6f61, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {}, {0x4}, {0x1, 0x6}, {0x8, 0x2}, {0xffff, 0x1}, {0x1}, {0xffffffff, 0x6}], [{0x9, 0x4}, {0x6, 0xeae8}, {0x777d, 0x369}, {0xfffffffe, 0xd9}, {0x0, 0x80000000}, {0x0, 0x4}, {0x9, 0x6}, {0xa6a, 0x484}, {0x2, 0x8}, {0x1f, 0xffff8000}, {0xbad, 0x1}], 0x0, 0x5}, {[{0x7f}, {0x6c6}, {0x4, 0x1}, {0x80, 0x1}, {0x800, 0x2}, {0x6, 0x2}, {0x401, 0x3}, {0x2, 0x2}, {0x80000000, 0x1}, {0x10001}, {0x6, 0x3}], [{0x1, 0x7}, {0x5b3, 0xfff}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x2}, {0x23, 0x3}, {0x8001, 0x3}, {0x8, 0x9}, {0x800, 0x8000}, {0x1, 0x2f}], 0x0, 0x1}, {[{0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x7ff, 0xb1940f7d718f5568}, {0xf04a}, {0xc00, 0x2}, {0x8}, {0x9, 0x566970daacd7caa9}, {0x7}, {0x2, 0x2}, {0x6, 0x3}], [{0xffffff81, 0xfffffe00}, {0x1, 0x10000}, {0x9}, {0x1098, 0x8000}, {0x4}, {0x6, 0x8}, {0x80000000, 0x4}, {0x9, 0x800}, {0x0, 0x64c5}, {0x3, 0x7}, {0x225c, 0x7ff}], 0x4, 0xb}]}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@multicast1, @ipv4=@multicast2, @gre_key=0xeb3c, @gre_key=0x7}}}, {{@ipv6={@local, @mcast1, [0x0, 0xffffff00, 0xff, 0xff000000], [0x0, 0xff, 0xef82147c1990bb4a, 0xff], 'teql0\x00', 'veth0_to_hsr\x00', {}, {}, 0x7a, 0x2, 0x4, 0x2}, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x1}}}, {{@uncond, 0x0, 0xc8, 0x100}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x80, 0x1, 0x6}, {0x101, 0x7, 0xc}, {0xfb62, 0x0, 0x40}, 0x4, 0x5c}}}, {{@ipv6={@mcast2, @remote, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0x0, 0xb5dd6e57c5e070b6], 'veth1_to_hsr\x00', 'veth0\x00', {}, {}, 0x8, 0x3, 0xf, 0x10}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@frag={0x30, 'frag\x00', 0x0, {0x8, 0x80000001, 0x5, 0x11}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, [], 0x1d}, @ipv6=@rand_addr="eb1a9cf5f118fd7e974549b6f77ec6f9", @port=0x4e20, @icmp_id=0x65}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xdc8)

20:27:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)

20:27:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="a9eeefd1afae7c5d14010000522f9e7ee6"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:46 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100)

20:27:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3, 0x0, 0x0)

20:27:46 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101080, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x9)
eventfd2(0x2, 0x800)
ioctl(0xffffffffffffffff, 0x0, 0x0)
unshare(0x400)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = gettid()
dup(0xffffffffffffffff)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000000), 0x43578cf5)
ptrace(0x4206, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
tkill(r2, 0x9)
wait4(r2, &(0x7f00000001c0), 0x8, &(0x7f0000000200))

20:27:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="d3aaffae741a32f50378452634721df90ca2c482fdc0751cca0c8a732c8e91")
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffffffffffe15)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000))

20:27:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x0)
poll(&(0x7f0000000040)=[{r2, 0x1040}, {r3}, {r0}, {r1}], 0x4, 0x0)

20:27:46 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

20:27:46 executing program 5:
unshare(0x20040600)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000))

20:27:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="a9eeefd1afae7c5d14010000522f9e7ee6"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:46 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x69, 0x3b, 0x44, 0x8, 0x8ca, 0x22, 0xb9bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0x5c, 0x69, 0x25}}]}}]}}, 0x0)

20:27:46 executing program 2:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x8)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
keyctl$get_persistent(0x3, r4, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0xc)
keyctl$get_persistent(0x3, r6, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0xc)
keyctl$get_persistent(0x3, r8, 0x0)
r9 = geteuid()
r10 = memfd_create(&(0x7f0000000040)='\x01\x00', 0x0)
pipe(&(0x7f00000003c0)={<r11=>0xffffffffffffffff})
fstat(r11, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fsetxattr$system_posix_acl(r10, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [], {}, [{0x8, 0x0, r12}]}, 0x2c, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [{0x2, 0x5, r4}, {0x2, 0x2, r6}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x6, 0xee00}, {0x2, 0x1, r8}, {0x2, 0x6, r9}], {0x4, 0x1}, [{0x8, 0x6, r12}], {0x10, 0x3}, {0x20, 0x4}}, 0x5c, 0x6)
ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x2, 0x6000, 0x4, 0x4], 0x7ff, 0x8d, 0x9})
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000a00000a1f000007002808000800084004001000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

20:27:46 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x4d)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x86, &(0x7f0000000140), &(0x7f0000000040)=0x8)

[  508.814202][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
20:27:47 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB="0000800000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0)

20:27:47 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

[  509.003200][T11993] usb 5-1: new high-speed USB device number 17 using dummy_hcd
20:27:47 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))

20:27:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="a9eeefd1afae7c5d14010000522f9e7ee6"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  509.263075][T11993] usb 5-1: Using ep0 maxpacket: 8
20:27:47 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
close(r3)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0)
execveat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

[  509.385312][T11993] usb 5-1: config 0 has an invalid interface number: 130 but max is 0
[  509.393842][T11993] usb 5-1: config 0 has no interface number 0
[  509.400089][T11993] usb 5-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=b9.bd
[  509.409346][T11993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
20:27:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="a9eeefd1afae7c5d14010000522f9e7ee6"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:47 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8080000003f)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

20:27:47 executing program 3:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000201010000409fbc60e130d79915434810000200040001000800020004000100"], 0x24}}, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0)

[  509.521870][T11993] usb 5-1: config 0 descriptor??
[  509.568350][T11993] aiptek 5-1:0.130: interface has 0 endpoints, but must have minimum 1
[  509.577124][T11993] aiptek: probe of 5-1:0.130 failed with error -22
[  509.726525][T14138] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  509.773283][T11993] usb 5-1: USB disconnect, device number 17
[  510.553002][ T3381] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  510.792916][ T3381] usb 5-1: Using ep0 maxpacket: 8
[  510.913075][ T3381] usb 5-1: config 0 has an invalid interface number: 130 but max is 0
[  510.921531][ T3381] usb 5-1: config 0 has no interface number 0
[  510.927858][ T3381] usb 5-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=b9.bd
[  510.937050][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.946699][ T3381] usb 5-1: config 0 descriptor??
[  510.987482][ T3381] aiptek 5-1:0.130: interface has 0 endpoints, but must have minimum 1
[  510.996318][ T3381] aiptek: probe of 5-1:0.130 failed with error -22
[  511.185469][ T3381] usb 5-1: USB disconnect, device number 18
20:27:49 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x45c, 0x4)

20:27:49 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/4096)

20:27:49 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

20:27:49 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000000), &(0x7f0000000140)=0xdf796efb1b91693c)

20:27:49 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

20:27:49 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)

20:27:49 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/71, 0x47)

20:27:49 executing program 3:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

20:27:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)

20:27:50 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

20:27:50 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

20:27:50 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x8010)
r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfff, 0x100)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x1})
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)

20:27:50 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

20:27:50 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/196, 0xc4)

20:27:50 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000140)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x38}}, 0x0)

20:27:50 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

20:27:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4)
bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)

20:27:50 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4)
r4 = syz_open_dev$dspn(&(0x7f0000001f80)='/dev/dsp#\x00', 0x10000000, 0x20800)
lsetxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="200026bd7000fcdbdf2514000000180007000c000400080000000000000008000200510c0000240007000c000400200000000000000008000100070000000c0004000800000000000000440004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a3000000000100006000400020004000200040002002895819b0002000800010002000000040004000400040008000200080000000800020007000000040004000c0002000800010007"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0xb00a7c2ca1f410f7)
prctl$PR_SET_FPEMU(0xa, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/165, 0x200000a5}], 0x1, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000007c0)={0x99, &(0x7f0000000700)="3927f9de606cd273411924b269ef09a820f1174c203460844ccbdd30ae36bd52c7c7308790c9b215781727d46c9abc47553f41f9e9d12ee3f09f24d76c6bc6e5e0b547c748ad0f62c474c7b8fbb7d9f7873923a11548599bafb935b4e77a452f949c61162e8b8fe923c6c0f12fdb3ae55aee393545da7a502a033a86f17598f649efc28ec7ed38d8fc151bf390fb8d98b60047533613403f4b"})
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r6, 0x40044102, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000800)=@v1={0x0, @aes128, 0x4, "067b2055450fcc79"})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x40fdf)

20:27:51 executing program 3:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

20:27:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3, 0x40000}}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:51 executing program 2:
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000))
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:51 executing program 0:
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"2ebd7ddaf6e909aa80e26ab6fea93133"}, 0x9ae}}}, 0xa0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000180))

20:27:51 executing program 1:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

20:27:51 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="4405ec0000", 0x5)
sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)

20:27:51 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xaa, 0x5a, 0x76, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb8, 0x0, 0x0, 0xe9, 0xbf, 0xb9}}]}}]}}, 0x0)

20:27:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x7, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x8}]}}}]}, 0x44}}, 0x0)

20:27:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3, 0x40000}}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:51 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x40, 0x223080)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000240)={{0x2, 0x0, 0x9, 0x1ff, 'syz1\x00', 0x6f6}, 0x1, [0x7, 0x0, 0x1, 0x1, 0x4, 0x4, 0x9, 0x8, 0x8000, 0x81, 0x2, 0x4, 0x10000, 0x4, 0x1f, 0x1ff, 0xfff, 0x9, 0x7ff, 0xc7f0, 0x8, 0x8, 0x8, 0x173000000000000, 0x80000000, 0x1000, 0x0, 0x3, 0x7, 0x8000, 0x100000001, 0xffff, 0x7, 0x5, 0x4, 0x10000, 0x7, 0x4, 0x5, 0x81, 0x400, 0x8000, 0xffffffff, 0x2, 0x9, 0x1, 0x1000, 0x2, 0x2, 0x2, 0x0, 0x80000001, 0x3f, 0xfffffffffffffeff, 0x1, 0x2, 0xbf, 0x2, 0x6, 0x36f1, 0x4, 0x10001, 0x2, 0xfffffffffffffff8, 0x1, 0x30b0, 0x9, 0x4, 0xff, 0x5, 0x80000001, 0x7fffffff, 0x7ff, 0x4000, 0x80000000, 0xffffffffffffffff, 0x1, 0x7f, 0xffffffff, 0x80000000, 0x95, 0x1, 0xffffffffb6f05337, 0x100000000, 0xd9b4, 0xfffffffffffffffc, 0x9, 0x3ff, 0x1, 0x3ff, 0x4, 0x0, 0x7f, 0x14767ce, 0x7, 0x7fffffff, 0x7, 0x5, 0x0, 0x5, 0x80000001, 0xfff, 0xffffffffffffffc0, 0x8, 0x2, 0x9, 0x100000000, 0x0, 0x80000001, 0x2, 0xff, 0x3f, 0x4f1f1c8d, 0x4, 0x56b, 0x5, 0x8, 0x80000001, 0x4, 0x7, 0xffffffffffffffff, 0x9, 0x4, 0x0, 0x6, 0x5, 0x8, 0x4df6], {r4, r5+30000000}})
splice(r1, &(0x7f0000000180), 0xffffffffffffffff, &(0x7f00000001c0), 0x5, 0x8)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x0)
ioctl$VIDIOC_G_AUDIO(r11, 0x80345621, &(0x7f0000000840))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="131190ec", @ANYRES32=0x0, @ANYRES32=<r13=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0xe, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000740)={r13, @in6={{0xa, 0x4e24, 0x1, @local, 0x5}}, 0x1, 0x40}, &(0x7f0000000800)=0x90)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {<r14=>0x0}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={r14, 0x1})
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

[  513.636590][T14252] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  513.669115][ T3381] usb 1-1: new high-speed USB device number 16 using dummy_hcd
20:27:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3, 0x40000}}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:51 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x21, 0xb, 0x0, "46b55b962ca56f5c673efa4aaf23a082005baf74fc6b450e1d08b3e073f5f462"})

[  513.926207][ T3381] usb 1-1: Using ep0 maxpacket: 8
[  514.043261][ T3381] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  514.051716][ T3381] usb 1-1: config 0 has no interface number 0
20:27:52 executing program 3:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

20:27:52 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x80, 0x4)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
r7 = dup2(r5, r5)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22}, {0xa, 0x0, 0x0, @mcast1, 0x1f}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r6, 0x27, "17a398", "889cb85cac808142710c25b35b679d9510099f89eb03460aec3b57123976e0129969d1c3271106c7cfcd02fb3c20fd04cc10d607c2aa9cdedb6d946105a7e376029b8ad6fcfb959aeb5a3664b8e817c54789201108c13e0e2caa01443cf2ccd120f77db7408b736a34e677d66af25fecf96ecc6dcc3d1246613cfda0716e5e6275e82b68e9a1bb29366ad9b3649d6da9ac3d32e3f6194f5b7b5b9b4b1df643504abc6091ad145f5c8fd39b6390fd73dc9fefbf8a249c6c9c07136cf0b2c6e58634365a3d529548cc1c193de2662354a4b228a0abe8d565a52eb2a12b76187c4ca4e2607a803be9f422dc4fbfe881e1d7c6e57dadf283cce16a28e9d688c5430e"}}, 0x110)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r6, 0x42}}, 0x10)
writev(r0, &(0x7f0000000100), 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xffffffffffffc3ad}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc420000000056b5000000000800000000080008000100000008020500ac14341b080003000800050f01"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x0, 0x0, 0x0]}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x38}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil})
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xffffffffffffc14e, 0x0, 0x6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3, 0x40000}}, 0x14}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:52 executing program 1:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

20:27:52 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xa)

[  514.444697][ T3381] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  514.453949][ T3381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.462137][ T3381] usb 1-1: Product: syz
[  514.466451][ T3381] usb 1-1: Manufacturer: syz
[  514.471114][ T3381] usb 1-1: SerialNumber: syz
[  514.486552][ T3381] usb 1-1: config 0 descriptor??
[  514.525546][ T3381] usb-storage 1-1:0.184: USB Mass Storage device detected
[  514.726629][T11993] usb 1-1: USB disconnect, device number 16
[  515.523005][ T3381] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  515.772977][ T3381] usb 1-1: Using ep0 maxpacket: 8
[  515.893128][ T3381] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  515.901574][ T3381] usb 1-1: config 0 has no interface number 0
[  516.223172][ T3381] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  516.232578][ T3381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.240825][ T3381] usb 1-1: Product: syz
[  516.245173][ T3381] usb 1-1: Manufacturer: syz
[  516.249796][ T3381] usb 1-1: SerialNumber: syz
[  516.256220][ T3381] usb 1-1: config 0 descriptor??
[  516.294852][ T3381] usb-storage 1-1:0.184: USB Mass Storage device detected
20:27:54 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
time(&(0x7f0000000080))

20:27:54 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, {0xa, 0x0, 0x0, @mcast2, 0x9}, 0x20, [0x1000, 0x1, 0x3f, 0x3ff, 0x98ce, 0x5, 0x8000]}, 0x5c)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x3, 0xffffffffd927d9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x6}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:54 executing program 2:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x10001, 0xec17a4c4eba7aba1)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
close(r3)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080))
dup(r4)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={<r5=>0x0, 0x5}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x20, 0x3, [0xff, 0xb7f7, 0x8000]}, 0xe)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r6 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000180)={{0x0, 0x1, 0x81, 0x0, 0xffff}, 0xcb, 0xff})

20:27:54 executing program 5:
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x4)

20:27:54 executing program 1:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

20:27:54 executing program 3:
clone(0x107fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
exit(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea')
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/253, 0xfd}], 0x1)

[  516.390377][ T3381] usb 1-1: USB disconnect, device number 17
20:27:54 executing program 5:
syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "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", "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"})

20:27:54 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=@raw=[@initr0, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:27:54 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040), 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)

20:27:54 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1d00)

20:27:54 executing program 0:
unshare(0x400)
r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284502, 0x0)

20:27:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x44}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

20:27:54 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x80ffff, 0x5f], 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x3c)

20:27:55 executing program 2:
r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x80000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x4)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000001c0)={0x82a})
execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xca63ec9358e29768)
r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x2, 0x5, 0x4, 0x4, {0x0, 0x7530}, {0x5, 0x0, 0x1, 0x4, 0x22, 0x8, "17b25b8c"}, 0x9, 0x3, @planes=&(0x7f00000000c0)={0x2, 0xfffffffd, @mem_offset=0x400, 0xb0c}, 0x4})

20:27:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500154001008178a80016000c000100e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

20:27:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x44}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

[  517.098813][T14353] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
20:27:55 executing program 0:
lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50ad1671a812112aa72850a954cba528d15ada1142ee0d359897a7c6d8e913367bcc4b54a77a69b286a44664541b9ede7921bf5ee79511bfa9e2eabf38473fa9ab"}, 0x91)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:55 executing program 2:
openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x3ff, 0x8, 0x4, 0x7d77}})
execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x100)

20:27:55 executing program 5:
r0 = socket(0x1200040000000015, 0x805, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2]}, 0x8001}, 0x1c)

20:27:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x44}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

20:27:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x45, 0x0, 0x6d4c61c945e1ce41)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x1, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:55 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000240)=0x8, 0x4)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000)

[  517.385107][T14364] RDS: rds_bind could not find a transport for fe80:200::bb, load rds_tcp or rds_rdma?
20:27:55 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r1 = syz_open_pts(r0, 0x1)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffdc9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b)
dup3(r1, r0, 0x0)

20:27:55 executing program 1:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0)
pipe2(&(0x7f0000000080), 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x1c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:27:55 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0))

20:27:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100)

20:27:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x44}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

20:27:55 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0)
write(r1, &(0x7f0000000140)="ea", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
getsockopt(r0, 0x29, 0x38, 0x0, &(0x7f0000000000))

20:27:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x4, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x34, 0x3, @str='\x11eyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0)

20:27:56 executing program 3:
syz_emit_ethernet(0x76, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast, {[@noop, @rr={0x7, 0xf, 0x9, [@empty, @multicast1, @remote]}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8, 0x8906}, {}, {}, {0x0, 0x57}}}}}}, 0x0)

20:27:56 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c040002ff0f03000004000000000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)

[  518.140525][T14411] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  518.149916][T14411] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
20:27:56 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0, 0xfffffffffffffea5, 0x0, 0x0, 0x1}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in6=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8)

20:27:56 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\t\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\t\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c)
write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x4}}, 0x90)

20:27:56 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)

20:27:56 executing program 1:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2)
writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)="11f2", 0x2}], 0x2)

20:27:56 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x0, 0xe})

20:27:56 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x55, 0x3fd, 0x0, 0x0, {0x10000007}}, 0x14}}, 0x0)

[  518.452050][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
20:27:56 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queud1\x00\x00\x00\x00\x00)\xaa\xdc/;\xe9\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe1\xff\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r3 = socket(0x1000000010, 0x400000400080803, 0x0)
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97)

20:27:56 executing program 5:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@upd={0xe0, 0x10, 0x690ee9b7eac96925, 0x0, 0x0, {{'adiantum(ctr-twofish-3way,des3_ede-asm,ghash)\x00'}}}, 0xe0}}, 0x0)

[  518.532033][T14437] batman_adv: batadv0: Adding interface: veth3
[  518.538394][T14437] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.563838][T14437] batman_adv: batadv0: Interface activated: veth3
20:27:56 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000080))
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'osx.', 'vboxnet1GPL\x00'}, 0x0, 0x0)

20:27:56 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='\x00', r0}, 0x10)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x20}, 0x28, 0x1)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x6, 0x3bf2b625], 0x2, 0x3bae, 0xc6, 0xf8, 0xffff19c1, 0xd4, {0x9, 0x513a, 0x0, 0x36cd, 0x700, 0xfbb6, 0x1, 0x3, 0x0, 0x1, 0x7, 0x6, 0x101, 0x2, "06b13b66814cc9189bd9fc9e2f7f4b1e413de1d0f61d3cd1d7b632a2f8c3f94e"}})

20:27:56 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1}, 0x0)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0xf9, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000000180), 0x361, &(0x7f00000001c0)}}], 0x480, 0x0)

[  518.730951][T14448] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use)
20:27:56 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246)
unshare(0x20400)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080))

20:27:56 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queud1\x00\x00\x00\x00\x00)\xaa\xdc/;\xe9\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe1\xff\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r3 = socket(0x1000000010, 0x400000400080803, 0x0)
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97)

20:27:56 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1})

20:27:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)

20:27:57 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr_pvc=0x0}})
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000001580), 0x311)

[  519.056704][T14468] usb usb2: usbfs: process 14468 (syz-executor.1) did not claim interface 0 before use
20:27:57 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queud1\x00\x00\x00\x00\x00)\xaa\xdc/;\xe9\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe1\xff\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r3 = socket(0x1000000010, 0x400000400080803, 0x0)
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97)

[  519.106909][T14472] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  519.175807][T14479] batman_adv: batadv0: Adding interface: veth5
[  519.182123][T14479] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.208292][T14479] batman_adv: batadv0: Interface activated: veth5
20:27:57 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x8)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:57 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"})

20:27:57 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

20:27:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

20:27:57 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queud1\x00\x00\x00\x00\x00)\xaa\xdc/;\xe9\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x03\xe1\xff\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'})
r3 = socket(0x1000000010, 0x400000400080803, 0x0)
r4 = dup(r3)
getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97)

[  519.406591][T14492] input: syz1 as /devices/virtual/input/input38
20:27:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)

20:27:57 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"})

[  519.696931][T14505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
20:27:57 executing program 2:
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@ethernet={0x0, @random="49dfd35f9610"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="984686", 0x3}, {&(0x7f0000000180)="4d835e68823a8dffc8e899cb5a81efb74d50130ecdd67266c6cd2e5f970a9ede947711a0e97a3ad2a12debf4c6018d6653c1c0edecee05bdd52c396107b4c45b816b8c31ce69d672b657c6ff83f4e0753dbccfb738ede34b72536b4868faf09676b94bb189006e6a0124a46718c8c76f042a6e3bfed9185545bec1f6860694ab55cf1de43f5aba2b7c49687f325e9c089202d40b57a17a", 0x97}], 0x2, &(0x7f0000000240)=[{0x110, 0x3a, 0xe4a, "3b6e4aadc5554ecd8406bb92806a0b1fc0cc4e9a481f244561d9159911e6af7afc055060a9c7cbe0997ec4a6094d2186cd75a0482eadf1598dce9194c778d9c6ef2ca0d5d28e642aa44410790bbb265c5cd656564bd3fc75f13e8af32d49e8afca7cbd45045064834e0928627822cb33507003a6f4ba6dbd40f3327dc512ae521f668295f238a58b4c35145d7e2a89b5f30ea2d7f927e6335c3a0da7d12893179d9a7e213899911ca09aa5f80a2b77ed9ecc49064475f0f8d2a0f59131418b9001171e1ecefae756aeb8075ae3058666b81a320789c0a9d3f6a8c15b56d88ebd59c93667b80c357381042f8efefba7a5bc627d4f1c1ac2f6a5"}, {0xc8, 0x113, 0x5, "cace11e69e8301d2ef5d7576792befa042c5d9e029114b3af5ad3667a12f0e47a643d09860394f72995adf86034ec57f6f74c0cc90635688666352f9b1cf89bc0c3667388140af3abeaea544cc61c9e75321389ee6a92913e6edcc8e8a71da0a6e976b72d345e6cd0f211ddfa4a58a5484e2537d8a862c0ca74211c2b9e81aa8f509e19e08d284c29f9ce008bcd7e0aebf72d8a8d24bd47d358f8dc7e5e80af9fc7196732f132f99a3b70bb0bb79a133c5a726cd296a24f8"}, {0x58, 0x6, 0x9349, "23b3045e07b3f157cf467db5d899c6ea26c9a8445e405907e60627cd8b4e0f27b768af4845dd4c928502986f6dd091f4ed91615d67d11a5b14287dd210fa3733610f509c9f"}, {0x50, 0x111, 0x7ff, "4d84785de3e07a5094085a8da1502d3cb975f3864fbce6edd03d2d4a6443b5096d56d9b59ab17f982effa1d25dd423662a93bd04cd8c25bc91820858"}, {0xc0, 0x10c, 0x3f, "77aca9700523ed64bc9351f9ec4e56c074538dbcb0d4ad5a80def5d097dbaaf6ebfd4bad3316084bd315f56497902f8862d7a3fb3b2bd664198a1776a6f8e977b6814ed6024d165c4e88f0b5e924bb3e6045d06e0b646e9e22c7ed9fba7a3736e637150ca91b329287702f477908e6b92d5acfcd83a59b78a178170c5ad358d96538b65b63e6fcff8347d2cd133467aabeff4eb4beaa49345f3ad7db5c7ae611a73a320189712b99e69c8cd5"}, {0xe8, 0x1, 0x9, "29f34091273051f3d93662fb1b1eb0341c973189ffc49cfbad571dc9036097f9ef97104d8243a8861d55894a63bde648e5976b51815a5613fce74a1964c90314bcc9dc004e4d92b4dd875f93eef7a2984a7a2cee8d05ca6edbee3c868a9a176f27596acab89b1c5d9e67b824251dea241ff4dbbe7bd4e6a12a655fbe183e976c91b13668ee156719eb94983edc7c7bdb1122c72f5b4208c2d0cbd7b9edbdab772a423b557e405bfec5acf8b14242504b3bad44e5cc4460048cbbc98b939730483e3aca82f20061228faf373c6ed6552a5d173d5820c931b3"}, {0xd8, 0xf3, 0x3, "e3d2dae3d816458796d51b1ad74e61ff2af49623a661e1444b0bf74cba7a33586a4ef08b2d5148451987213957ec3a94e109d6fec4db8fca58cc8201d425a81713874f629fe0552aced62e89b5c4f61af4b2d3d946f5d3239bb66b3c7aba5b149cfd65230c667c502b08aa49deba28956a0bdfe5cff38ad26d801a03e448c927dbc853289d4df01a7582092ddb95028868d2f39176ce90582c537ecf2907321bed62fd97246e3a357a3a23ab6e9df15d73f506aa8a3954cedb7cb4397c7448bf10"}, {0x30, 0x88, 0x1, "72193ab46217efabcb1aa3157ca7ee56ef890776bfaaa07b1b542f2e"}, {0x58, 0x0, 0x721, "e82eb4ff18b2a86988e8af14ac440b090224c9bebe6e399ea7769ea1265171fdabc5b60001ce0c0252ed5b0a1b5d871d94d6a85b4c32c424a78a48b7fe05c69104445e"}], 0x588}}], 0x1, 0x85)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:27:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0x201)

20:27:57 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, "40451d842baaa8ca66b8089d32f64425cd140e52703446b32df847bcab2a2609"}})

[  519.797949][T14510] batman_adv: batadv0: Adding interface: veth7
[  519.804343][T14510] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.829866][T14510] batman_adv: batadv0: Interface activated: veth7
20:27:57 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"})

20:27:58 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"})

20:27:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2b0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="000f05"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20:27:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0)

[  520.301440][T14532] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  520.338436][T14532] batman_adv: batadv0: Adding interface: veth9
[  520.344888][T14532] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.370182][T14532] batman_adv: batadv0: Interface activated: veth9
20:27:59 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0x201)

20:27:59 executing program 2:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
close(r2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080))
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x4, 0x4)

20:27:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000001c0)="f2a6bad004b00f0f090f3036f30f1a970000660f3806581e0f0cbad00466b9a60a00000f32ee643e0f79bb0000baa100b000", 0x32}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000000c0))

20:27:59 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000000000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08)

20:27:59 executing program 1:
syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @random="cca784fb14ec", [], {@ipv6={0x86dd, {0x0, 0x6, "7415a0", 0x38, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, @calipso={0x7, 0x8}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7439a8", 0x0, "04fb63"}}}}}}}, 0x0)

20:27:59 executing program 4:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

[  521.711144][T14549] ebt_among: dst integrity fail: 100
20:27:59 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x8, 0xc}], @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x44}}, 0x0)

20:27:59 executing program 1:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
unlink(&(0x7f0000000140)='./file0\x00')
tkill(r0, 0x1000000000016)

20:28:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0x201)

[  521.867290][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  521.867328][   T30] audit: type=1804 audit(1571344079.911:31): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/125/file0/file0" dev="ramfs" ino=41477 res=1
20:28:00 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
sysfs$1(0x1, &(0x7f0000000040)='\x00')
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000))
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:28:00 executing program 5:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/mixer\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

20:28:00 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x8, 0x0, "b6f73b6e690dfa12c023fe736a343f8b70bbfadd0b2b7917794acb5f197a68d966aa0b5a5f41ca2b6204d8bac209c26d4b213ba809a1c6e983a2b18c3657b1710a93895ee1e98fb8566092d73d71d352"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x7, 0x0, "e581f5dec76183b5cbfeb544269c07eef89b4a97ab5ac306d221adbc4563d12830351b4dd74d100fd0dc820dc67e566dc3b316ba183f644e46f728a16bebfab83714b8cff0d6d40c46a5ed8b04be28da"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, "4ae9645a4bdbefd0187f1e35cba955127c7ca8b982f7408054208a36ee7b341bc01b6d8d52e8ee57c61ec7f041e965466b7a2d4cec6a03dd5feb2a33b78491e3bef5d31b03d40e4f5f68137e44379c3b"}, 0xd8)

20:28:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f0000000180)=0x201)

20:28:00 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x400)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0xfffffffffffffffd)

20:28:00 executing program 1:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffff9c, 0x0, 0x100)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
close(0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r0, r1, 0x0, 0xedc0)

20:28:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000804, 0x0, 0x0)
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200), &(0x7f0000000100)=0x10)
shutdown(0xffffffffffffffff, 0x400000000000001)

[  522.548477][   T30] audit: type=1804 audit(1571344080.591:32): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/125/file0/file0" dev="ramfs" ino=41477 res=1
20:28:00 executing program 4:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "5f5539ae7383df635d7eb9f00cde999ef4e1d4fbae589edcbcd64ae9781d89f20a7c347bd734db9d80a3e9ee0d0f04fe5305dacf9e656dc623d0d8abb05b81ebf7fa83533ebfe364612ee7d5571be6e3af5eccf0e26370ff66a26e95f4b7b1206b9d9a70fe612b356ec5074716b0e71eb9f60ac1c5e653c9a7de0de9a5f8c8047f77ece27201fc36e2ca04338864356e123b3b96be97afa5d6698e6f08a657f7ad07b42df05dfca83247581434b575e2d4419e52f1103e9e3ddc440a98f9caeace71f8affb3cfc62e4b428403787ff063d2923a50c0410f191c7923b77c51fea54cc7f2b8adcd2a5e1f53495c168736a160f28435b70f6e40df8523c2deaef8b70f13bc408d1d6eb05dbcae35f0c12cb00b8d589c0dda912acf9315852e1cbb85857f9421cd623fc5046448db22eec3c07358c4778c73a2495bf3452b18d8e904ed88ae250a99edb20b78fc923ccc841847a4f6d514320309afe2f0a075e50096c7a8cd4da2d88791d01a10cea10a97d32e8bb05a5e2bf52be5fffa3fb26953a0fadac598644cf0297d01d5c1ed9f2123ba789fa650b0d140a478903cc23a5b5c2a2a52f19bdd40039ac0291f648f1f991e272c52669f7843e73b3be22103fe0a88d5d405b9ecea5d602be0b5466d18d8a971b69a8e80e48621103a6bc6ee3a7b70b199005241779f22fa2cc159988eaf2d53c858ec06ab56acc232b587ffee3a5cb29f5641b2189fb1617d1a652e42511fe2e447a2636f18ceabc261126200193eb9f309f80aa204a93883bf6fb247ade866685f300295f8735e18d1d81365dbd2bddfa1779c59effed803bbe0a68302b1ab0f0d00892138ad24d52d653d92897bd28c2f031a77eae54ef3ce9a1fc44ea41763b2d780a454f68ea1a297302b4fa6664923a818040f5a74e0db3ff24e940e97d4abff40af2d36f7bceb8a0c5e90dbefbc8ba496f6e42f11ce11fb20655138f9387938abc3aa3a742f749a8695d972c537127519f654945bac96f0a2ef9d6b24f2226ae677684e3eb63041d6b5105777a8e6aa41ff11366448c0af1ddf5e3f2a1d828b4c9ede3809eab736c9035f2a7032ce38b699dfdc3e158e1ce62d325441e1b05a3ba5f663f20b0cb703cb2960aad298177881aa6b52bf4ae112c5d2bb691ac34b0723be7ddcfff0015e578475db1f062c5a50b54bbcba2f591eb4d6de66f386b0d5dd3975229ad25ae95d82266dfb9c1a6f497ef54b6ac5ee81edae16c47e89f9a435377dfac411db459559ce483921251745b8b94f69d4815b009ea86aedc5a75a516ff2afaff9a418f73c2cacbcdf45dd02ba962399f9b81e149635c2b4c0bda790a6d72fc243f6fbc73d0a0636db51c03d93b44b42c07f2269b465231f953e6a45dc549e9b5ef05443da7820cd667f5b0ff47a13f0a3df630a6f98f72e09978b829389d6a11afb0a7a0988822bb95fcb50399e51295f464662118646d2996da0fa710b082036820ae0a60828479bad4489061244b74179cfec74ab273551190c0eb2ca95be86391b8e469454796d04b29646b8aaae49889ffd84e83e33fb0cd7b10d778e72422f474911897dbd4548d9658e9af23cfff0ad4a7d750ab59e0f8988082ab7ac8d27eeab1c5809de6694aba8ee6ff1ba23d422f38dc026a77933cb0fc916d22131f7f736e35c881c5551f13a5037f65b9090372bb8e73bb9cd686715afef6b40ff275a978078c1e1c7db358285e5caee5c53cb4a7b446db91e5c0615342265edd9f09a72002aae56c7ad4269a0513569db514ee852724cdcccb72e8836fc270f7aa03e03e65f4572c2909e6fb1b557e89c3b505ba2f2b10b545513758abdbdc5b3e5ec1fe4d6bd5947b354058eccb79f10e971a85bdafa5aa27224acc734d884f9282ed033fc540defa3181d451713565d940879cd70a1d704b9a390de509351d5129bff18051b0c7ca196a78d3b8d0c8f384c79ad637b2e1770fecfc980960ef403cbc6bb284792cd169133f35aea028d9ffdc1668572dd197db86a26cb6fe1bb822bb76968ef2cd3c384704b75d0f17a50bcce054a400edd3b2f2abf72d2d8a679fdc94216d2d7d43ca1e60aeb5a313f8104f8ae54e75beb6c106cf080b9ecc9a1f91508b37d9ede25a1bede738c3a7f3501391a7b1863fe120ea26c4ff13f1de4588b150f3f2c12a9b9d92e6a8610c788c4d449a91416307a313536e1779bef88028d65a9398c5d1492b729d5f08e34e64fa07507f64297a1f9305a2d68169f653d5c107c9860ca0d822916eb357c646c229e792b1a5da56b35ab971bb82e41581e11f24f9c6b26c019dd2f2f89f2a82b74bd856ed7b46a2d9c07b2856bc39e9a28f271c5bb06db5bfa04d21e37e778b3e03071d25da8bbc91543fe8909603ba92e3455cb0edfe1dc040f12c169a97a5b8fb09f97acda29ab8491e7c9f81320b1a9de5773078557a6a0bdc5a1bfd2d953c47b3e5ccc70d76dc4ba10c297d7591e2c2150b8235de09714fedcf23aedb0ec9586e52f6af6c299256ad5a0a4ce22666be48592977dc5ff5c5eea529b81df4510016240b8fc8489bf59c899bb75481220554d0b9aebf1660cb72b01dfc3ffaac27dc1d36247e86339c6d99fc3ca8edf585fdb236ecdffda1b99819f873367ee5d8fde5d596517f895c9154deab01ca26008edbeadecfe33cae750ff044469a1b3b104b35af0c04a35a48aecf54dd8844b598432b81f67ce232ad46a247cad103274cd7c206d890008b149aaa3310f9794243cc5e04d4bd3e66a5b01ef67044412eba507a20399856cd26fb6233ebc064aa7b5ba94198bc05301dd74d6875b6d3b4731c2a11f0656767a3e6ba0a3d6951a7f9385ff99876891b8150ac5257756ef92a6c3854ccba8f13bca3cd3e66fdc93feefc44c3eba570970e0a6921f1eef24713ed5a174b8e52a0bc1bd3b420bdd0e521835289d29267fca4512caeaf64d1adeba2457864801d30d37e4eea965f8cfdb314f62307d8a12084a65da330f800862cae3876cdffe8c77d982ce9527b069628f0d796c0ec1c1b423ab6eb248e176a9b201d4de572f7901d8d88ae3dc6c3f196a4e3fb81552f16f7a7b7b3a242824b0618a855fc150fe8d484c80b3e1ea6c42f165dcfa7b0b292f9c7f27179d32260d4f472385a8818f7d76133030cf1256153b4162c8c3a3629c01e9b8cb5a30b3d0068d7f0e3727d8159739386511746fad1cfcc98c7af05b489876432957c6d59c51f12ebb62acac90311e6b00cea58b355db5a36718dfb8140d23e64e41ef9d33969cae75ea3ef8f14ad8c9b2d0c8bd7bf4366b091b5992ffbd71800495c0484cbee4b5fffaede0808cdcfa2409227e6b96dd82481d6d00bfff72c29f860b7fa4fa9c3634d9a2e4f7a8ef240c997b749e0562514d5c2c5d66da75149dea37b1cbb347fa0df5be2b9a5ddf20a6d47936b3b55cedc64453e69413a89c8a9eaeda00fccc96281b4f29db0f3e45fa098c77ffe3c0488529ecfa801cdf7fe8a23f6a3aa04acaf4e300c44e6d873f43b9fd4b13cbed2411c97378e07c7a6799d272d36ac8964233130947ed88f727915fa58a4812ceacd6cc6a52bc7fcba5e57543e93d293d5a428c73b194f33ba752b0ebeb0262423e7a8f490707a220857f44e191304cffb93cfc75b217ca306292549c8742fe3aa62a464d40c666115015201c0fef3e9555615f91c3d15b6e1556a9b04febc2ae7e3d689ca5f58b51f2717ae8c5153f2c2a4df11ea8cafcc369327c2a0a6f7946daf09be323d59e4b0e42ebcdeca373a6d70a3286382f1405b7107af899da00dbd52324657870bd18ca26f3ef47e0e81cd335c827512e88f24202836e7a1b505f0d03a23d577430d971458a11ff42e36b2d2883b664d402eb7497a90ba1f94829b6d9c6b4c4f7e9dc49882520a6fd2590cb8b41328541b9076e43f6019c3da9084e57960478c268f4215bb98455fbd2981e7e37caf7aaf9008f87cfe196da930637c55da5a34e142a433494e6f92a5985d7e6fc0ec68d2ad25144919af6dc81afc88cd05f01b401730bccc3086c9dd06d38ed522e52e7ffae7671898fb91cec0821c061aaea6c47ae877d2d7f5ca1ecf159e0ea152ce713f652c116f62e12cad293331db922a5fed311ab22096d90fc17ccc53f84d46eae680def0b9949e0d9debff263d575e590941a5ce0b33548beb6dbc01104f6054da73cc349625adece6a54e092d8d740915b91d81df30374a78693d6b69724f05354d61ac0febff4a544b88954d11d3f4927895edf6ad755313227ac87f24f12d70a831df16bd45c4a03570fdf27d698fa5581fce2d002890a3f2059a6bfdf77f0aeee3ad8318449bc1b2d486b225b148a78e921c73a2c37256dfb1ad611e410d5436e0d31d00ab5177da7915a74ef3307927c23c764f5cf62c3e2db86284c9abb39045b625d507f5c8d440557b4dad2a39593fbb572cce25a364aae44134fdd97ef0148690881bee42b6bd929f12cdf07996597a2a8366b12841f8fb8dfc0ece651756637b95c6bdb92320302805b4a700e7d3dfb0b8878862f400f8437a6c153b5fab40d30af07e73cf4345cb6fa81574018a7bc0e8789fae8b8560f4b93d413fa8e0e0218527ccb82873fc9da6cc34b6197c1d8bd9223ab7c4efb1f8cf021450037f4576934d83116655c120062fc3b912176fd395ccc792d492f2730465f8b4c68155b6ceb52e80742d2970e24004171f4685cd78467a4e943a0fecff66dffff10922d69236460dc37c1df9b19dded1ecb932dd8dd2045d2f8e8d3dfb6a83a65d6623553a2aed7a12b78effeeaa58eec84cdefc84923177afb7bd04f6fc3d3332d63ed5c5d6fe8820b9853e7615407eb23962f5232db44bc0267e7f07e47b158de0732a974b80aeb00ffeeca83d26fe21e487ea4472cd9048f942155784af8f68006cdb4286480a7ffa1ba6e93fe7fdb33283359d28bf9311dee59899e0e77aa113fadda21526c8e2bd60f21e182b735a5b0177fb95e948857c6c4ae391b2b4950a35b129e7bf25b7eb2c0857290c55f5d28b78ca1f39f0cd676610805b0a378647ae958182b26de1ddbf80e80d7ab1d2476086ed192e98bee0969bc0e8765278cb5570ccc29ac6d7298821bff4f85895deffcf4ce54a69878cfb41eade0d8703cbcff02352733ace2d800ba68b0fdcc52b94247ecacddf80ad228cf76eb547d276d0f6402054e34c3569e2b53ea3cbc54e49e099372cde3acd1ba47f836a765f855763a175a58ec4d6cecc72375da2d8c956c2868e77bfdb697182b554f0b743d7095cf13a3ba1d19e7590c281bd09ce235898a9682aacb5633b4fa4c3bdd71139c20c518b6a7651a47df7658a5a7ed41b3e7e43543d68c1dd4a5d01ec7e42cabdd6963db84f0d69b5a471ff8b929a8774baee39b14ab325af2ea7756c656c0135a59568499208341333d6b896cf0cc10108970e20313df241d179bd2a4d2392b269e6aeb9d2570bba7e3c67f49e90cf95562f93077a5fb588225724d444fcd8da55921dcff7b0be49ac0171ae98209e729f65bcebe447ccc0a185719f3fd55d1ae263daac4a420da91d05cdfc85d48e5743483dbb6fe81e5c216948953d95d5e725db17df44f05a57c6cc425e55572f9163e536a6d2d51d5213c937f6ddba08fc1f90ec73088a766a685f2c0d43b80422d48eef23b2ea588ea26b8dffb4f0df0cf91d6ea8f14a663ba2b165e4427010742fe63905d62b9dcf2385dce09fe75e4746d5c9c402ee77bfc9f39a28eb9f2751a81b090a499706accafbf5ae1afa9af350fd7481bb", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

20:28:00 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
io_setup(0x3f, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x284, 0x80, 0x5001, 0x0, 0xc, 0x8, 0x1, 0x4}})

20:28:00 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="7525820aedb8", @random="010167323978", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x213, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

20:28:00 executing program 1:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, [], [{}, {0xffffffff}]})

20:28:00 executing program 5:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

20:28:00 executing program 0:
r0 = getpid()
r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000180)=""/28, 0xbfb189e)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd})
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000003c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x1000000000015)

20:28:00 executing program 1:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, [], [{}, {0xffffffff}]})

20:28:00 executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x200041}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)

[  522.975968][   T30] audit: type=1804 audit(1571344081.021:33): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/98/file0/file0" dev="ramfs" ino=41625 res=1
20:28:01 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x400)

20:28:01 executing program 1:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, [], [{}, {0xffffffff}]})

[  523.109871][   T30] audit: type=1804 audit(1571344081.151:34): pid=14632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/126/file0/file0" dev="ramfs" ino=42350 res=1
20:28:01 executing program 3:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0xe, @vbi})

20:28:01 executing program 1:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, [], [{}, {0xffffffff}]})

20:28:01 executing program 4:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

20:28:01 executing program 2:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x8, 0x0, 0x0, 0x0, 0x1b3}, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)={0x8, 0x6}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x400)

20:28:01 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0xc0ffffff, 0x4}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

20:28:01 executing program 1:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
r2 = gettid()
rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4))

20:28:01 executing program 5:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

20:28:02 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x308)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0x0)

20:28:02 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket$inet6(0x10, 0x2, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x15, &(0x7f0000000100), 0x4)

[  524.048888][   T30] audit: type=1804 audit(1571344082.091:35): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/99/file0/file0" dev="ramfs" ino=42433 res=1
20:28:02 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat(r1, 0x0, 0x0, 0xa0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

20:28:02 executing program 2:
syz_emit_ethernet(0x438, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x402, 0x88, 0x0, @local, @local, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "920aa8", 0x0, "1a15f0"}, "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"}}}}}}, 0x0)

[  524.430782][   T30] audit: type=1804 audit(1571344082.471:36): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/127/file0/file0" dev="ramfs" ino=42492 res=1
20:28:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220)

[  524.593498][T11779] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  524.707497][T14689] ebt_limit: overflow, try lower: 0/0
[  524.833013][T11779] usb 4-1: Using ep0 maxpacket: 8
20:28:02 executing program 5:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

[  524.953524][T11779] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config
[  524.964257][T11779] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.975576][T11779] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef
[  524.984882][T11779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.084712][T11779] hub 4-1:118.0: ignoring external hub
[  525.102614][T11779] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device
20:28:03 executing program 4:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006)
sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe)
openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

[  525.429716][T14688] ebt_limit: overflow, try lower: 0/0
[  525.447259][ T3381] usb 4-1: USB disconnect, device number 3
20:28:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x342)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000200)="a080a2c0")
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000580)="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", 0x336}], 0x1}}], 0x1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:03 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10324fc00120000000a000a00053582c1b0acea8b0900038005001000d1bd", 0x2e}], 0x1}, 0x0)

20:28:03 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

[  525.737413][   T30] audit: type=1804 audit(1571344083.781:37): pid=14707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/128/file0/file0" dev="ramfs" ino=41792 res=1
[  525.759817][   T30] audit: type=1804 audit(1571344083.791:38): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/100/file0/file0" dev="ramfs" ino=42559 res=1
20:28:03 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_sl\tve\x00'}, {0xc, 0x5, [@IFLA_BRPORT_MODE={0x6}]}}}]}, 0x44}}, 0x0)

20:28:03 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

[  525.840238][T14704] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  525.985707][T14716] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
20:28:04 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

20:28:04 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

[  526.233452][T11779] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  526.473541][T11779] usb 4-1: Using ep0 maxpacket: 8
[  526.593719][T11779] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config
[  526.604457][T11779] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.615878][T11779] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef
[  526.625660][T11779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.674535][T11779] hub 4-1:118.0: ignoring external hub
[  526.686908][T11779] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device
20:28:08 executing program 3:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, &(0x7f0000000000), 0x20a154cc)

20:28:08 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

20:28:08 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f000079bffc), &(0x7f0000000100)=0x5)

[  530.895427][T14678] cdc_wdm 4-1:118.0: Error autopm - -16
[  530.903666][ T3381] usb 4-1: USB disconnect, device number 4
20:28:08 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

20:28:08 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x803, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1a, &(0x7f0000000000), 0x20a154cc)

20:28:08 executing program 5:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xe1, 0xc, 0x8, 0x14aa, 0x22b, 0x90f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0xb4, 0xba, 0xa1}}]}}]}}, 0x0)

20:28:09 executing program 0:
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x02\x01\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=&(0x7f0000000040)}})
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000))

20:28:09 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:09 executing program 3:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, &(0x7f0000000000), 0x20a154cc)

20:28:09 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2)

20:28:09 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uhid\x00', 0x2, 0x0)
writev(r0, &(0x7f0000001bc0)=[{&(0x7f0000002200)="162d90ff", 0x4}], 0x1)

20:28:09 executing program 0:
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x02\x01\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=&(0x7f0000000040)}})
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000))

[  531.254302][T11779] usb 6-1: new full-speed USB device number 4 using dummy_hcd
20:28:09 executing program 3:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, &(0x7f0000000000), 0x20a154cc)

20:28:09 executing program 1:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = gettid()
recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x11000, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1004000000013)

20:28:09 executing program 4:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x41)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000015c0)='P', 0x1}], 0x1}}], 0x2, 0x0)

20:28:09 executing program 0:
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x02\x01\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=&(0x7f0000000040)}})
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000))

20:28:09 executing program 3:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x10, &(0x7f0000000000), 0x20a154cc)

[  531.613896][T11779] usb 6-1: config 0 has an invalid interface number: 204 but max is 0
[  531.622291][T11779] usb 6-1: config 0 has no interface number 0
[  531.628718][T11779] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7
[  531.637935][T11779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.724127][T11779] usb 6-1: config 0 descriptor??
[  531.770041][T11779] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  531.780755][T11779] dvb-usb: bulk message failed: -22 (2/-30592)
[  531.787084][T11779] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  531.897522][T11779] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  531.907977][T11779] usb 6-1: media controller created
[  531.957919][T11779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  531.987233][T11779] usb 6-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[  531.996017][T11779] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  532.043447][T11779] Registered IR keymap rc-dtt200u
[  532.049607][T11779] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  532.063932][T11779] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input40
[  532.078234][T11779] dvb-usb: schedule remote query interval to 300 msecs.
[  532.085417][T11779] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  532.099114][T11779] usb 6-1: USB disconnect, device number 4
[  532.232583][T11779] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
[  532.732923][T11779] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  533.093131][T11779] usb 6-1: config 0 has an invalid interface number: 204 but max is 0
[  533.101533][T11779] usb 6-1: config 0 has no interface number 0
[  533.108029][T11779] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7
[  533.117234][T11779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.126791][T11779] usb 6-1: config 0 descriptor??
[  533.167003][T11779] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  533.176987][T11779] dvb-usb: bulk message failed: -22 (2/-30591)
[  533.183329][T11779] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  533.214607][T11779] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  533.225089][T11779] usb 6-1: media controller created
[  533.232195][T11779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  533.247276][T11779] usb 6-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[  533.255943][T11779] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  533.313347][T11779] Registered IR keymap rc-dtt200u
[  533.319249][T11779] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  533.332445][T11779] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input41
[  533.346469][T11779] dvb-usb: schedule remote query interval to 300 msecs.
[  533.353552][T11779] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  533.373987][T11779] usb 6-1: USB disconnect, device number 5
[  533.491737][T11779] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
20:28:11 executing program 5:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xe1, 0xc, 0x8, 0x14aa, 0x22b, 0x90f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0xb4, 0xba, 0xa1}}]}}]}}, 0x0)

20:28:11 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x400)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x40044160, 0x3)

20:28:11 executing program 0:
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x02\x01\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=&(0x7f0000000040)}})
r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000))

20:28:11 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0})

20:28:11 executing program 4:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x41)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000015c0)='P', 0x1}], 0x1}}], 0x2, 0x0)

20:28:11 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:12 executing program 0:
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)

20:28:12 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:12 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}})
write(r0, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x31f)

20:28:12 executing program 4:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x41)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000015c0)='P', 0x1}], 0x1}}], 0x2, 0x0)

20:28:12 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xffffffff, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

20:28:12 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0)
ioctl$int_in(r1, 0xc00000c0045005, &(0x7f0000000180)=0x80)
write$nbd(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1)
close(r1)

[  534.283262][T11779] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  534.653134][T11779] usb 6-1: config 0 has an invalid interface number: 204 but max is 0
[  534.661483][T11779] usb 6-1: config 0 has no interface number 0
[  534.667966][T11779] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7
[  534.677261][T11779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.687020][T11779] usb 6-1: config 0 descriptor??
[  534.727176][T11779] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  534.737316][T11779] dvb-usb: bulk message failed: -22 (2/-30592)
[  534.743639][T11779] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  534.763510][T11779] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  534.774061][T11779] usb 6-1: media controller created
[  534.781450][T11779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  534.803135][T11779] usb 6-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[  534.811659][T11779] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  534.863659][T11779] Registered IR keymap rc-dtt200u
[  534.869580][T11779] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  534.882969][T11779] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input42
[  534.897022][T11779] dvb-usb: schedule remote query interval to 300 msecs.
[  534.904199][T11779] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  534.950569][T11779] usb 6-1: USB disconnect, device number 6
[  535.050674][T11779] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
20:28:13 executing program 5:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xe1, 0xc, 0x8, 0x14aa, 0x22b, 0x90f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0xb4, 0xba, 0xa1}}]}}]}}, 0x0)

20:28:13 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_address={0x5, 0x9, 0xfffffffd, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0)

20:28:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0)

20:28:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xffffffff, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

20:28:13 executing program 4:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x41)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b4", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000015c0)='P', 0x1}], 0x1}}], 0x2, 0x0)

20:28:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={0x0})

20:28:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xffffffff, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

20:28:13 executing program 2:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="05", 0x1}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1)
writev(r0, &(0x7f00000000c0), 0x10000000000000a4)

20:28:13 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x2ab}}], 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80085, 0x0)
writev(r0, &(0x7f00000023c0), 0x10000000000003ff)

20:28:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xffffffff, 0x4)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

[  535.855087][ T3381] usb 6-1: new full-speed USB device number 7 using dummy_hcd
20:28:14 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000001080)=""/246)

20:28:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000141e00000c00000000000000000000001800000000000000140100000c00"/48], 0x30}, 0x0)

[  536.253479][ T3381] usb 6-1: config 0 has an invalid interface number: 204 but max is 0
[  536.261815][ T3381] usb 6-1: config 0 has no interface number 0
[  536.268279][ T3381] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7
[  536.277774][ T3381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.287640][ T3381] usb 6-1: config 0 descriptor??
[  536.337867][ T3381] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  536.348103][ T3381] dvb-usb: bulk message failed: -22 (2/-30592)
[  536.354454][ T3381] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  536.383432][ T3381] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  536.393896][ T3381] usb 6-1: media controller created
[  536.401184][ T3381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  536.418505][ T3381] usb 6-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[  536.428004][ T3381] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  536.473421][ T3381] Registered IR keymap rc-dtt200u
[  536.479374][ T3381] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  536.492501][ T3381] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input43
[  536.507030][ T3381] dvb-usb: schedule remote query interval to 300 msecs.
[  536.514166][ T3381] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  536.549593][ T3381] usb 6-1: USB disconnect, device number 7
[  536.659752][ T3381] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
20:28:15 executing program 5:
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd7, 0xe1, 0xc, 0x8, 0x14aa, 0x22b, 0x90f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0xb4, 0xba, 0xa1}}]}}]}}, 0x0)

20:28:15 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'})
r1 = socket$inet6(0xa, 0x803, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r2})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, r2})
r3 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0x0)
getegid()
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

20:28:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={0x0})

20:28:15 executing program 4:
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x4000)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x5, 0x0, 0x6, 0x800, 0x3f, 0xffffffff})
openat$hwrng(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
unshare(0x400)
fchown(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=ANY=[], 0x0, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0)
fstat(0xffffffffffffffff, 0x0)
vmsplice(r2, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

20:28:15 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20)

20:28:15 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10d, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0)

[  537.225003][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  537.232450][    C1] protocol 88fb is buggy, dev hsr_slave_1
20:28:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4f, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x57)

20:28:15 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

20:28:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TIOCSETD(r0, 0x541a, 0x0)

[  537.340534][T14906] bridge0: port 1(bridge_slave_0) entered disabled state
20:28:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={0x0})

[  537.443069][    T5] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  537.566070][T11779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  537.575637][T11779] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.582903][T11779] bridge0: port 1(bridge_slave_0) entered forwarding state
20:28:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4f, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x57)

20:28:15 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67}, @udp={0x0, 0x0, 0x1c, 0x0, [], "539f8d2aeefd52e844d87ef668c761ababa8e6a8"}}}}}, 0x0)

[  537.703318][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  537.709475][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  537.833452][    T5] usb 6-1: config 0 has an invalid interface number: 204 but max is 0
[  537.841875][    T5] usb 6-1: config 0 has no interface number 0
[  537.848231][    T5] usb 6-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7
[  537.857488][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.907567][T14906] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.945142][    T5] usb 6-1: config 0 descriptor??
[  537.989645][    T5] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[  537.999634][    T5] dvb-usb: bulk message failed: -22 (2/-30592)
[  538.006650][    T5] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  538.023515][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  538.029633][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  538.083803][    T5] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[  538.094297][    T5] usb 6-1: media controller created
[  538.103370][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  538.109637][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  538.122248][    T5] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  538.148816][    T5] usb 6-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)...
[  538.157905][    T5] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  538.176909][T14922] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.184208][T14922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.223383][    T5] Registered IR keymap rc-dtt200u
[  538.229437][    T5] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  538.243371][    T5] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input44
[  538.258391][    T5] dvb-usb: schedule remote query interval to 300 msecs.
[  538.266010][    T5] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[  538.282885][    T5] usb 6-1: USB disconnect, device number 8
[  538.412629][    T5] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
20:28:16 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

20:28:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={0x0})

20:28:16 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67}, @udp={0x0, 0x0, 0x1c, 0x0, [], "539f8d2aeefd52e844d87ef668c761ababa8e6a8"}}}}}, 0x0)

20:28:16 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4f, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x57)

20:28:16 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'})
r1 = socket$inet6(0xa, 0x803, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r2})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, r2})
r3 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0x0)
getegid()
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

20:28:16 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x4f, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x57)

20:28:16 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67}, @udp={0x0, 0x0, 0x1c, 0x0, [], "539f8d2aeefd52e844d87ef668c761ababa8e6a8"}}}}}, 0x0)

20:28:17 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)

20:28:17 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x17)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r2, &(0x7f0000001180)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x48)

[  539.063367][T14958] bridge0: port 1(bridge_slave_0) entered disabled state
20:28:17 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@empty=[0x2b], @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67}, @udp={0x0, 0x0, 0x1c, 0x0, [], "539f8d2aeefd52e844d87ef668c761ababa8e6a8"}}}}}, 0x0)

20:28:17 executing program 3:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil)
mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f0000000000/0x600000)=nil)
mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0)

20:28:17 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

[  539.303635][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  539.310004][    C1] protocol 88fb is buggy, dev hsr_slave_1
20:28:17 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.limit_in_bytes\x00\nZ\xb4$\x81\xdd\xc3q\xd3\xa17CH-\xe2\xa1H\x9d\xdb\xafY\xbfx07\\;u\xc0\xfa\v\xc1\xad\x8d\x92_\xd0\xa5\x0f\x01;\xfb\x9b\x94\x94:\xb72F\xe7\xcd\xa3\x1c\xce\x9b=\x1b\x81W\xa7\xe98\x1eF]OqUDt\x92\xd4z+\xdcl\x12\x14\xc6\x12?\xc3\x1fR\xe6\xb1\x85n\xf0\x90v\x0f+><\xe6_\x95\x80\xe4\xc2\x0fX\xd8 \xe3Z\x91\xbd.\xc5\x8bn(\x93\x9b$\xd6\x03\x94\x04\x9c\xd7\x1e\xc5\x9d\x90\xc8\xe6c\x18\x00\x00\x00\x00\x00\x00\x00S\x01\xdaUK\xc5\x95\xdd\x89a\xe6\xc3J\xc4\xfd\x9c}_\t\x019\xc3\xf5\xfea\xb3\xa9+\xc7\x1a\x00\\\xd69\v\b-CD\xe5\xb6\xaaW\xaf\xf4\x86\x95\x11\x9d,\x04P=\x00Px\x98F\xe3\xeb\xe5\x92\xcd\x0e4\xbca\xe1\xc7>', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x4d}]}, 0x2)

[  539.501972][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  539.511569][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.518916][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
20:28:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001}]})

20:28:17 executing program 5:
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffb, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x402, 0x0)

20:28:17 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')

20:28:17 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'})
r1 = socket$inet6(0xa, 0x803, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r2})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, r2})
r3 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0x0)
getegid()
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

20:28:17 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.limit_in_bytes\x00\nZ\xb4$\x81\xdd\xc3q\xd3\xa17CH-\xe2\xa1H\x9d\xdb\xafY\xbfx07\\;u\xc0\xfa\v\xc1\xad\x8d\x92_\xd0\xa5\x0f\x01;\xfb\x9b\x94\x94:\xb72F\xe7\xcd\xa3\x1c\xce\x9b=\x1b\x81W\xa7\xe98\x1eF]OqUDt\x92\xd4z+\xdcl\x12\x14\xc6\x12?\xc3\x1fR\xe6\xb1\x85n\xf0\x90v\x0f+><\xe6_\x95\x80\xe4\xc2\x0fX\xd8 \xe3Z\x91\xbd.\xc5\x8bn(\x93\x9b$\xd6\x03\x94\x04\x9c\xd7\x1e\xc5\x9d\x90\xc8\xe6c\x18\x00\x00\x00\x00\x00\x00\x00S\x01\xdaUK\xc5\x95\xdd\x89a\xe6\xc3J\xc4\xfd\x9c}_\t\x019\xc3\xf5\xfea\xb3\xa9+\xc7\x1a\x00\\\xd69\v\b-CD\xe5\xb6\xaaW\xaf\xf4\x86\x95\x11\x9d,\x04P=\x00Px\x98F\xe3\xeb\xe5\x92\xcd\x0e4\xbca\xe1\xc7>', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x4d}]}, 0x2)

20:28:18 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x1e00})

20:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000180), 0x4)

20:28:18 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.limit_in_bytes\x00\nZ\xb4$\x81\xdd\xc3q\xd3\xa17CH-\xe2\xa1H\x9d\xdb\xafY\xbfx07\\;u\xc0\xfa\v\xc1\xad\x8d\x92_\xd0\xa5\x0f\x01;\xfb\x9b\x94\x94:\xb72F\xe7\xcd\xa3\x1c\xce\x9b=\x1b\x81W\xa7\xe98\x1eF]OqUDt\x92\xd4z+\xdcl\x12\x14\xc6\x12?\xc3\x1fR\xe6\xb1\x85n\xf0\x90v\x0f+><\xe6_\x95\x80\xe4\xc2\x0fX\xd8 \xe3Z\x91\xbd.\xc5\x8bn(\x93\x9b$\xd6\x03\x94\x04\x9c\xd7\x1e\xc5\x9d\x90\xc8\xe6c\x18\x00\x00\x00\x00\x00\x00\x00S\x01\xdaUK\xc5\x95\xdd\x89a\xe6\xc3J\xc4\xfd\x9c}_\t\x019\xc3\xf5\xfea\xb3\xa9+\xc7\x1a\x00\\\xd69\v\b-CD\xe5\xb6\xaaW\xaf\xf4\x86\x95\x11\x9d,\x04P=\x00Px\x98F\xe3\xeb\xe5\x92\xcd\x0e4\xbca\xe1\xc7>', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x4d}]}, 0x2)

20:28:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

20:28:18 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.limit_in_bytes\x00\nZ\xb4$\x81\xdd\xc3q\xd3\xa17CH-\xe2\xa1H\x9d\xdb\xafY\xbfx07\\;u\xc0\xfa\v\xc1\xad\x8d\x92_\xd0\xa5\x0f\x01;\xfb\x9b\x94\x94:\xb72F\xe7\xcd\xa3\x1c\xce\x9b=\x1b\x81W\xa7\xe98\x1eF]OqUDt\x92\xd4z+\xdcl\x12\x14\xc6\x12?\xc3\x1fR\xe6\xb1\x85n\xf0\x90v\x0f+><\xe6_\x95\x80\xe4\xc2\x0fX\xd8 \xe3Z\x91\xbd.\xc5\x8bn(\x93\x9b$\xd6\x03\x94\x04\x9c\xd7\x1e\xc5\x9d\x90\xc8\xe6c\x18\x00\x00\x00\x00\x00\x00\x00S\x01\xdaUK\xc5\x95\xdd\x89a\xe6\xc3J\xc4\xfd\x9c}_\t\x019\xc3\xf5\xfea\xb3\xa9+\xc7\x1a\x00\\\xd69\v\b-CD\xe5\xb6\xaaW\xaf\xf4\x86\x95\x11\x9d,\x04P=\x00Px\x98F\xe3\xeb\xe5\x92\xcd\x0e4\xbca\xe1\xc7>', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x4d}]}, 0x2)

[  540.143771][T15011] bridge0: port 1(bridge_slave_0) entered disabled state
20:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000180), 0x4)

20:28:18 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @empty=[0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\b ', 0x14, 0x11, 0x0, @dev, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

20:28:18 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0400002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001006362710030040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000020000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180001001000030000000000000000000000000000000000100005000100000000000000ff070000"], 0x45c}}, 0x0)

20:28:18 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @empty=[0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\b ', 0x14, 0x11, 0x0, @dev, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

[  540.646232][T11736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  540.655682][T11736] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.662983][T11736] bridge0: port 1(bridge_slave_0) entered forwarding state
20:28:18 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20)

20:28:18 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'})
r1 = socket$inet6(0xa, 0x803, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r2})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, r2})
r3 = open(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
socket(0x10, 0x80002, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0x0)
getegid()
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

20:28:18 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @empty=[0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\b ', 0x14, 0x11, 0x0, @dev, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

20:28:18 executing program 1:
pipe2(&(0x7f0000000080), 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000180), 0x4)

20:28:18 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0400fc0010000b4003000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0)

20:28:19 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)

[  540.965795][T15066] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.3'.
20:28:19 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @empty=[0x0, 0x8847000000000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00\b ', 0x14, 0x11, 0x0, @dev, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

20:28:19 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000180), 0x4)

20:28:19 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r3)

[  541.174679][T15067] bridge0: port 1(bridge_slave_0) entered disabled state
20:28:19 executing program 4:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x38, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])

20:28:19 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x6, 0x4)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto(r0, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b)

20:28:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000100)="66b9110000000f32f30f116f020f01c3f30f1bc10f0f53fea6f2f20f30f20f58270f20c06635000000800f22c0266536d8880000f30fc735", 0x38}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  541.548050][T15076] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.555747][T15076] bridge0: port 1(bridge_slave_0) entered forwarding state
20:28:19 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000025c0)=ANY=[@ANYBLOB='\x00\x00#'], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, 'v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20:28:19 executing program 3:
r0 = socket(0x40000000015, 0x805, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/13, 0x6})

20:28:19 executing program 1:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000a00)="77ca379ea3c6d01e8d2bf19f3bbc15b7dc009860fe32810068d0b1794a55b89adfa2110fd4594ec0128406685b41ddeb93eb741b47ebb47377b9a8db6f1f665b04b7f2ddcef58a645042983b44c0f58fd6dc8488cf860f5b02d8c7ae085d85965dfbb145a71254483a17e2c9414ae9f57f7f80110995c92a7f0b884f30a640be0082730becd204fa02a86e6b4db30301ce790658a7352f7e606d022ee49b7b50feccc78e824567a21286e56c46c219b772ba0583f6a5dc20d02dcf51681465793694e83c29a594496f2abd39605ca56c58c195dd867114344d0fb25ec454d0d5b23200958b03881cee42330dd169cc77ddad47f7044a9a915831e18a6006da3cd9ad0d022bf8ab8440c1331e27987c1b1699810a3fee42dab93f18d2ac6cfbd3bc7b44bea21ea41c2110ec9228d9a4c79e5605fa4c4dd83740387b6f1c82afb9e5282a641e1fba8c77018d96a349e0df8aea1a489203b0d91da2779962f42783b89db5fefeb0d13df9884b1f5468e984619c88d052ad3e5a65be678caf34af4eeed8affd5b9eebc3293450d8f6efcc9aaab1ba128208de847f010ce93f0c37a779636d1d6fa56c68e33946a9a73a531ab53c87048d18064d4f708a2dcba011e03114a0cb8055808cc70ffaf663778f083ea904c33a61f7765abc0556054474a97e905571fad0e232212680dd8c70b1b33e047e5e273a61519c1b349d0982de4d4d2889687f43fae8575f5f24f3f91d21ce983c11eb9ced9de1e5208230ad03e6a7b1994c7c03a57851e9d1b01315ac0d54ae2b919fd04a09ce20e73be63c045deeaa530c38592360bbd978a7f12f73b9591c00ebcf7f0ebc41f4919acf46db58aac289bd0e62223d050f42b35677ac048350feb43080b1390eaa0295750d02c82672ab5c29a06d50de6b26c3ce8c1f423a63f3f6e91011627cd20fc0f75c4bd0529c8e88070c6d2fc7183c50aa359b0d84fdeb3ca47e016e40aae74e062dd0b01667812e17e2604064323acc77b5959160b226a9604a7f0098505f2b9ca436908bb1b5f0963f5cfa1fc92753090846422285e9fca72a4e42a02454657907c1af7f069301a38edc73d882887a60233a510752ab7f0e5b63cb1526b1c738587353b5b7d465b680e65cc79e1e80dfd6195ca73d8e1fbd9038f28704479605e3ea5e405443b79528ec394b012eb9a5b2b4e20a36a25857d2eb7c919d64d9adcb6c4d66671e2ce37b034f7d7513b9324b61f1f12cccc8ab513ddb7d1ee1ee1f514b687fc70fa0d2d59cd24afa3d2a6f1ad4a11e2b6df8a902d7ae885adb43457d45046b65c71216a39d88640968b30ad83cd5bb6ce5218cb7e68bd23fb29e45d1b954ab3afbeaed75bbfaf78cc93cb7f0b1314d9e37d4db563cc5ffccbee900270384690fb082474c0da934e828551b683fe04246c437f875c4dcfb2bb3675f40b0bfa590a258a21392317be6cdfba0cc2176eb060b2119aadb2be463af541b71036b65a71e2bd58fe82bdb0f1c143fc861b1fdb97a0ec7aef64018cdf524c5537f98ecfcae89ef9fc3591908e2d306b6962962bfb36bf1f67a8955809f373c8300010a949e229b51ba42dbf0c157d3caec3be5a3780ac8d018e5349ef74466363109a38b7849cc51ca8ec44ecef503cb5fa016ab59ae701dde6af3313623667377c24c7238a552cd6293880102cc73b9369f216b5097922560de7df6a438fae531e697442af383aef5eb9a14f20816f1d53ca4a9ee2c6a9eaecaa5f9213f49bab8d8a4f9fb617449a61b31258f8c76206a3de75d069a9258ae897b44a920b26639917dd1cfcb4465a48bf5387c5d9cfb4d34bc91cd46d6a382d2db6334d429717d37dd6d35220379ea405e1e2f2709b102641e8c517e76558f807c3a3ab9b97559ec63b3a9114d23a9160a3f21ff2d0b96a21dd5f956b43ee2647e6d6e5bdac765152ff6c057f9cd6a520bdefa005b76d50754b513ad7dfe1ccf698cb8fab0461ea2f3ba082e8aaf2de084521fd71a8092d94632ab35d9044451920be4d3d8ee2a9ff55a62eed65d572a6c21ebdbd61b5581f8eeca8f773d49f331ecdbaf98df079d06409833129574de5390b0d6835bd72213640dd645c08a72097c02125a62595504b449c1010671f9c4e22491591d5cd70312f1a5644cf72f760d69d40abc25"}, 0x20)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0)

20:28:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000100)="66b9110000000f32f30f116f020f01c3f30f1bc10f0f53fea6f2f20f30f20f58270f20c06635000000800f22c0266536d8880000f30fc735", 0x38}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:19 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b700000001edffffbfa30000000000000703000028feffff620af0fff8ffffff71a4f0ff0000000015040000000000007e400300000000006504000001ed000054000000000000006c440000000000007b0a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41bbba4f94329e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6d770252e79166d858fcd0e06dd31af9e8080000d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6040600f728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d004827f373edd0e46daa44708607151ee58b98f2e177a778207a74df0cea3197c64758bc6abc910caa8e31e3bbecae59fc93ba44d54b202be89369fcbc283b9d0bb32f65fdffcff6e27a2e3d263253467c2a686ec274d48c97fa235c58f1e09ce1af01189f271cdf73d80189a65761521ee50985f4c585b8d03119d5f3488d7717f796368a17ccbb885620946bd862901ee2246f27bc0f1f865d3a6310999d9a5166525a9942196afc"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff30}, 0x48)

[  541.854106][T15107] ptrace attach of "/root/syz-executor.1"[11773] was attempted by "     
 àÿ              0       p       €        ÿ              Àÿ      �       ðÿ                 ÿÿÿÿ                                                                                                                                                           
                                                                                                                                                                                           ÿÿÿÿ             \x0a                                                                                                                                                                                                                                                                                                                                                                                                                                              @      =
20:28:20 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000180))

20:28:20 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x17}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, @local={0xac, 0x223}, @local={0xac, 0x14, 0x38}}, "f3ece2e75de5e497"}}}}}, 0x0)

[  541.914361][T15113] ptrace attach of "/root/syz-executor.1"[11773] was attempted by "     
 àÿ              0       p       €        ÿ              Àÿ      �       ðÿ                 ÿÿÿÿ                                                                                                                                                           
                                                                                                                                                                                           ÿÿÿÿ             \x0a                                                                                                                                                                                                                                                                                                                                                                                                                                              @      =
20:28:20 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x807, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000003c0)={0x9})

20:28:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  542.223206][   T17] usb 5-1: new high-speed USB device number 19 using dummy_hcd
20:28:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000100)="66b9110000000f32f30f116f020f01c3f30f1bc10f0f53fea6f2f20f30f20f58270f20c06635000000800f22c0266536d8880000f30fc735", 0x38}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:20 executing program 3:
r0 = socket(0x10, 0x802, 0x0)
unshare(0x8000400)
getpeername$packet(r0, 0x0, &(0x7f00000000c0))

20:28:20 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x4)

[  542.463370][   T17] usb 5-1: Using ep0 maxpacket: 8
[  542.583330][   T17] usb 5-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[  542.592611][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.633084][   T17] usb 5-1: config 0 descriptor??
[  543.113552][   T17] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  543.537707][T11779] usb 5-1: USB disconnect, device number 19
[  544.323034][   T17] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  544.572971][   T17] usb 5-1: Using ep0 maxpacket: 8
[  544.693373][   T17] usb 5-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[  544.702704][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.712960][   T17] usb 5-1: config 0 descriptor??
[  545.013226][   T17] gs_usb 5-1:0.0: Configuring for 1 interfaces
20:28:23 executing program 2:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

20:28:23 executing program 0:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0x91, 0x75, 0x0, {0x86, "e4b8b63b2573186cac112e1e2f1f32a33431aa9999d43cf8e87b145c4dee91af480e239084393bf9e7e7b68c5d441c00c04454687bb8731017662c61766c5cb1555a2e3dd66f394854015c3760c0fc75d38c580eefe7a304a37b67c0a5fefd506c53ea0e7a47f3bc8b5d2f87fac5ec5260db7bf8ffd9626f8fd7bbf2376a04a9121d957a8389"}}, 0x91)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206})
ioctl$KVM_NMI(r2, 0xae9a)
fgetxattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d2e6b657972696e67f02102"], 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:23 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r0 = gettid()
syz_open_procfs(r0, &(0x7f0000000100)='smaps\x00')
exit(0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')

20:28:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000100)="66b9110000000f32f30f116f020f01c3f30f1bc10f0f53fea6f2f20f30f20f58270f20c06635000000800f22c0266536d8880000f30fc735", 0x38}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:23 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20:28:23 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  545.073252][   T17] gs_usb 5-1:0.0: Couldn't get bit timing const for channel (err=-71)
[  545.081695][   T17] gs_usb: probe of 5-1:0.0 failed with error -71
[  545.148883][   T17] usb 5-1: USB disconnect, device number 20
20:28:23 executing program 2:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

20:28:23 executing program 0:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

20:28:23 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x8)

20:28:24 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20:28:24 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x100000400000003a)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x1, [0x0]})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b)
ftruncate(r4, 0x80003)
sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe)

20:28:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  546.142531][T15194] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
20:28:24 executing program 2:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

20:28:24 executing program 0:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

20:28:24 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x100000400000003a)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x1, [0x0]})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b)
ftruncate(r4, 0x80003)
sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe)

20:28:24 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000240007050000000000000c0000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20}]}}]}, 0x54}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x332, 0x0)

20:28:24 executing program 5:
syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="a8abf670821b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffa888, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, 0x0)

20:28:24 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x100000400000003a)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x1, [0x0]})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b)
ftruncate(r4, 0x80003)
sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe)

20:28:25 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$inet_opts(r0, 0x0, 0x16, 0x0, 0x0)

20:28:25 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x100000400000003a)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000280)={0x1, [0x0]})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0xc08, 0xff3b)
ftruncate(r4, 0x80003)
sendfile(r3, r4, &(0x7f00000000c0), 0x8000fffffffe)

20:28:25 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20:28:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\xd7', 0xffffffffffffffff, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f00000000c0)="a71fc2028ce7", 0x6}], 0x1, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x2000, 0x0, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[], 0x1f003})
syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:25 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20:28:25 executing program 2:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

20:28:25 executing program 0:
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000740)={0x0, 0x0})
syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[  547.432246][T15234] kvm: pic: non byte read
[  547.443830][T15234] kvm: pic: non byte read
[  547.459593][T15234] kvm: pic: single mode not supported
[  547.464273][T15234] kvm: pic: single mode not supported
[  547.476612][T15234] kvm: pic: non byte read
[  547.535660][T15234] kvm: pic: non byte read
[  547.545774][T15234] kvm: pic: non byte read
[  547.596955][T15234] kvm: pic: non byte read
20:28:25 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x77, 0x1c, 0xbd, 0x8, 0x61d, 0xc160, 0xef28, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xde, 0x0, 0x1, 0x14, 0xa4, 0x1, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0)

[  547.645211][T15234] kvm: pic: non byte read
[  547.675133][T15234] kvm: pic: non byte read
[  547.680757][T15234] kvm: pic: non byte read
[  547.694345][T15234] kvm: pic: single mode not supported
[  547.694363][T15234] kvm: pic: level sensitive irq not supported
[  547.710405][T15234] kvm: pic: single mode not supported
[  547.710851][T15234] kvm: pic: single mode not supported
[  547.727821][T15234] kvm: pic: non byte read
[  547.750093][T15234] kvm: pic: level sensitive irq not supported
20:28:25 executing program 2:
capset(&(0x7f00000fc000)={0x20080522}, &(0x7f000047efe8))
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})

[  547.753634][T15234] kvm: pic: single mode not supported
20:28:25 executing program 0:
r0 = timerfd_create(0x0, 0x0)
r1 = dup(r0)
timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)={0x7})

[  547.772406][T15234] kvm: pic: level sensitive irq not supported
[  547.799799][T15234] kvm: pic: level sensitive irq not supported
[  547.815962][T15234] kvm: pic: single mode not supported
[  547.822299][T15234] kvm: pic: level sensitive irq not supported
[  547.859729][T15234] kvm: pic: level sensitive irq not supported
[  547.874347][T15234] kvm: pic: level sensitive irq not supported
20:28:26 executing program 2:
unshare(0x20000000)
clone(0x2102051ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)

[  547.891130][T15234] kvm: pic: level sensitive irq not supported
[  547.909016][T15234] kvm: pic: single mode not supported
[  547.915674][T15234] kvm: pic: level sensitive irq not supported
20:28:26 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10)

[  547.991713][T15234] kvm: pic: single mode not supported
[  547.991729][T15234] kvm: pic: level sensitive irq not supported
[  548.022403][   T17] usb 4-1: new high-speed USB device number 5 using dummy_hcd
20:28:26 executing program 2:
r0 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffffd}, 0x1c)
listen(r0, 0x0)

20:28:26 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)="4583420788852121222f8ae2ca5c9b5d974a7b1f8052762d431df4061925ae36dd1b421bc093c0e426f2913caf08d91cc2a016e7f6d9daa3323e66d3c5455ad61f", 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x20)

20:28:26 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'queue\x1b\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x400004, 0x20000006, {0x77359400}})

[  548.273089][   T17] usb 4-1: Using ep0 maxpacket: 8
[  548.393191][   T17] usb 4-1: config 0 has an invalid interface number: 222 but max is 0
[  548.401654][   T17] usb 4-1: config 0 has no interface number 0
[  548.408127][   T17] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ef.28
[  548.417380][   T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.527859][   T17] usb 4-1: config 0 descriptor??
[  548.556193][T15234] kvm: pic: single mode not supported
[  548.576621][   T17] quatech2 4-1:0.222: Quatech 2nd gen USB to Serial Driver converter detected
[  548.783680][   T17] usb 4-1: qt2_attach - failed to power on unit: -71
[  548.790817][   T17] quatech2: probe of 4-1:0.222 failed with error -71
[  548.813590][   T17] usb 4-1: USB disconnect, device number 5
[  549.543014][T11779] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  549.782981][T11779] usb 4-1: Using ep0 maxpacket: 8
20:28:27 executing program 5:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7)
close(r0)

20:28:27 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e)
connect$pptp(r1, &(0x7f0000000240)={0x18, 0x2, {0x0, @loopback}}, 0x1e)

20:28:27 executing program 4:
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @remote, {[@generic={0x0, 0x8, "f7d77b439cb8"}, @rr={0x7, 0xb, 0x0, [@remote, @multicast2]}, @ra={0x94, 0x6}, @ra={0x94, 0x6}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @rr={0x7, 0xf, 0x0, [@multicast1, @multicast1, @local]}]}}}}}}}, 0x0)

20:28:27 executing program 0:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240), 0x222, 0x0, 0x1bc}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x10036}, 0x0)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x2000000000000, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0)

[  549.903740][T11779] usb 4-1: config 0 has an invalid interface number: 222 but max is 0
[  549.912090][T11779] usb 4-1: config 0 has no interface number 0
[  549.918601][T11779] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ef.28
[  549.927838][T11779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.983656][T11779] usb 4-1: config 0 descriptor??
[  550.027180][T11779] quatech2 4-1:0.222: Quatech 2nd gen USB to Serial Driver converter detected
[  550.233606][T11779] usb 4-1: qt2_attach - failed to power on unit: -71
[  550.240629][T11779] quatech2: probe of 4-1:0.222 failed with error -71
[  550.250739][T11779] usb 4-1: USB disconnect, device number 6
20:28:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@timestamp={0x44, 0x318}]}}, @icmp=@echo}}}}, 0x0)

20:28:28 executing program 1:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xb, &(0x7f0000000000), 0x20a154cc)

20:28:28 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x22a, 0x40, 0x0, 0x0, 0x29d40bf8, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x8, "9a88ca016843b3d8"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

20:28:28 executing program 0:
unshare(0x2000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x24, 0x4, 0x1, 0x0, r0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0}, 0x20)

20:28:28 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x4)
write$evdev(r0, &(0x7f00000002c0)=[{{}, 0x0, 0x80000001}, {{0x77359400}}], 0x30)

20:28:28 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000300)={{0xffffff94}, {}, 0xffffff7f, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

20:28:28 executing program 1:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xb, &(0x7f0000000000), 0x20a154cc)

20:28:28 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000300)={{0xffffff94}, {}, 0xffffff7f, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

20:28:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, 0x0)

20:28:28 executing program 3:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90)

20:28:29 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000300)={{0xffffff94}, {}, 0xffffff7f, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

20:28:29 executing program 5:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x8)

20:28:29 executing program 3:
unshare(0x8000400)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080))

[  551.060110][   T17] usb 5-1: new high-speed USB device number 21 using dummy_hcd
20:28:29 executing program 1:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xb, &(0x7f0000000000), 0x20a154cc)

[  551.453157][   T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.464467][   T17] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  551.563251][   T17] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40
[  551.572623][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=248
[  551.581061][   T17] usb 5-1: SerialNumber: syz
[  552.063377][   T17] appletouch 5-1:1.0: Geyser mode initialized.
[  552.070712][   T17] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input45
[  552.266381][   T17] usb 5-1: USB disconnect, device number 21
[  552.354466][   T17] appletouch 5-1:1.0: input: appletouch disconnected
[  553.032913][   T17] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  553.393168][   T17] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.404392][   T17] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  553.493226][   T17] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40
[  553.502762][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=248
[  553.511146][   T17] usb 5-1: SerialNumber: syz
20:28:31 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0x2ecb, 0xb)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xfc7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x100000000007fd, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10)
recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102)

20:28:31 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000300)={{0xffffff94}, {}, 0xffffff7f, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

20:28:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32=r4, @ANYBLOB="0000f3ffffffffffffff0000"], 0x24}}, 0x0)

20:28:31 executing program 1:
r0 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xb, &(0x7f0000000000), 0x20a154cc)

20:28:31 executing program 3:
r0 = epoll_create1(0x0)
r1 = epoll_create(0x3)
r2 = epoll_create(0x8)
r3 = epoll_create(0x1001)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))

20:28:31 executing program 4:
process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0})

[  553.783273][   T17] appletouch 5-1:1.0: Failed to request geyser raw mode
[  553.790646][   T17] appletouch: probe of 5-1:1.0 failed with error -5
[  553.894485][   T17] usb 5-1: USB disconnect, device number 22
20:28:32 executing program 1:
r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5012, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, {0x0}, 0x0}, 0xa0)

20:28:32 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="05030000dd913e0001a00000c52c", 0xe, 0x0, 0x0, 0x0)

20:28:32 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {0x4}}, 0x24, 0x0)

20:28:32 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x19, &(0x7f0000000100), 0x8)
r4 = dup2(r1, r3)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
dup3(r4, r2, 0x0)

20:28:32 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000000))

20:28:32 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)

20:28:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf})

[  554.241406][T15378] ion_ioctl: ioctl validate failed
20:28:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x2, [{0x2a}, {}]})

20:28:32 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0)

20:28:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

20:28:32 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x0, 0xca, 0x0, 0x0, 0x4})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

20:28:32 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x98f904})

20:28:32 executing program 1:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="1b000000190081ace4050cecff091ffa1c6a23480b0e00faf02651", 0x1b}], 0x1}, 0x0)

20:28:32 executing program 5:
r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='nolazytime\x00', &(0x7f0000000080)='-bdevppp1[\x00', 0x0)

[  554.595058][T14950] Bluetooth: hci0: Frame reassembly failed (-84)
20:28:32 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
syz_emit_ethernet(0x207843, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b409000002000000000000000000000000ffffe00000023e02000000000090780009040060b680ffffff7f0000000000000011009c444218e3a400000000000000000000ffffac14ffbbc63e4b6f12016b7c373182a11c848a24a03392867cb7969864683ef308623fc96e78b5e6008148698a97d55d7a421bdc1c0121725ba74606c221808c8056801a53d03e759edefc21d2ce84293be556a9d8799f9b2ba4068dfcfdfcdb2b075c847da94b4a5a3b4cedaf5047937931669a96681cb7e3e14593f4ace3d257e3d501c8cce9abbcafdbfe988cf07af73b3c33d7ddd2f7b15a4e217816db8366ad1c8c39ca04f8d950c6dba44dbb1d5ca50cf9e464045c6affda63363a5d2b8ebcd9b06c953ea71881e0c183a753085722497921"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0)

20:28:32 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00')

[  554.743323][    C0] net_ratelimit: 8 callbacks suppressed
[  554.743344][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  554.755355][    C0] protocol 88fb is buggy, dev hsr_slave_1
20:28:32 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0)

20:28:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a844780ffe006000ec001000000a2bc5603ca00000f7f89000000200000000101120100000309ff5bffff00c7e5ed5e0000000000000000", 0x48}], 0x1)

20:28:32 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@main=@item_012={0x2, 0x0, 0x0, "1e63"}, @global=@item_012={0x2, 0x1, 0xb, '6)'}]}}, 0x0}, 0x0)

20:28:33 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00')

20:28:33 executing program 3:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r3=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0xe, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)

[  555.293298][   T17] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  555.543246][   T17] usb 6-1: Using ep0 maxpacket: 8
[  555.663273][   T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.674522][   T17] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  555.687623][   T17] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40
[  555.696783][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.706699][   T17] usb 6-1: config 0 descriptor??
[  556.185643][   T17] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0
[  556.193056][   T17] arvo 0003:1E7D:30D4.000B: global environment stack underflow
[  556.200795][   T17] arvo 0003:1E7D:30D4.000B: item 0 2 1 11 parsing failed
[  556.208568][   T17] arvo 0003:1E7D:30D4.000B: parse failed
[  556.214474][   T17] arvo: probe of 0003:1E7D:30D4.000B failed with error -22
[  556.386119][ T3966] usb 6-1: USB disconnect, device number 9
[  556.663026][   T17] Bluetooth: hci0: command 0x1003 tx timeout
[  556.669475][T15440] Bluetooth: hci0: sending frame failed (-49)
[  557.163013][ T3966] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  557.383348][   T17] Bluetooth: hci1: command 0x1003 tx timeout
[  557.389650][T15440] Bluetooth: hci1: sending frame failed (-49)
[  557.403036][ T3966] usb 6-1: Using ep0 maxpacket: 8
[  557.523495][ T3966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  557.534919][ T3966] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  557.547972][ T3966] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40
[  557.557479][ T3966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.567131][ T3966] usb 6-1: config 0 descriptor??
[  557.876044][ T3966] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0
[  557.883187][ T3966] arvo 0003:1E7D:30D4.000C: global environment stack underflow
[  557.890927][ T3966] arvo 0003:1E7D:30D4.000C: item 0 2 1 11 parsing failed
[  557.898731][ T3966] arvo 0003:1E7D:30D4.000C: parse failed
[  557.904665][ T3966] arvo: probe of 0003:1E7D:30D4.000C failed with error -22
[  557.994916][   T17] usb 6-1: USB disconnect, device number 10
[  558.743072][   T17] Bluetooth: hci0: command 0x1001 tx timeout
[  558.749319][T15440] Bluetooth: hci0: sending frame failed (-49)
[  559.463110][ T3966] Bluetooth: hci1: command 0x1001 tx timeout
[  559.469741][T15440] Bluetooth: hci1: sending frame failed (-49)
[  560.823107][ T3966] Bluetooth: hci0: command 0x1009 tx timeout
[  561.543053][   T17] Bluetooth: hci1: command 0x1009 tx timeout
20:28:43 executing program 4:
pipe(&(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18)

20:28:43 executing program 2:
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@map={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x25000000}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

20:28:43 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)="877555779457a81ee9df57e0cc4b7c2d7bf32228f2c6c628a7a28b5cd520ed", 0x1f)

20:28:43 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00')

20:28:43 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, &(0x7f0000000840)="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", 0x5a8, 0xfa9f8eb5ee87b6c9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
write$binfmt_misc(r2, &(0x7f0000000080)={'syz0', "f9"}, 0x5)

20:28:43 executing program 5:
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xcf, &(0x7f0000000000), 0x4)

[  565.655971][   T30] audit: type=1400 audit(1571344123.701:39): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15450 comm="syz-executor.1"
20:28:43 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="0d00000000003639408f8f765fa3a3ba09660199783b0a82f79b32a7c8225086600a38e07d4dcf8a66596759e95307b6c0ab73e03c53555c17c4cb8c1e49bfd659af0b3aa5714e74bc1c49fe97f379", 0x4f}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[  565.705677][   T30] audit: type=1400 audit(1571344123.731:40): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15450 comm="syz-executor.1"
20:28:43 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00')

20:28:43 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)

20:28:43 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

20:28:43 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1bb054d54ac45a333c28785d630fd1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa5064492916d98251883c182f2e", 0x88}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

20:28:43 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="b00200002e001b0828bd09b78100df2500000000", @ANYRES32, @ANYBLOB="0a001f0010000800f2ffffff0c000100636f726f75700000d80002009400010090000e0000000c000100766c616e000000005c0002001c0002000008000001000000000000100300000000000100010000000800060006000000080003003a0c0000080003006c0a001008000300320700001c00020007000000090000000f000000090000003f000000010000002000060078115871fe9585bb2fc52d3451000000400002003c002d3475ce0bcaa297320f88c74c49010008000000ffffffff0700000005000000b0000000070101feb15201008b000000aa01ffff0300fffe010400000600000001000000ff07000008000b00040000000c00010072737670000000008c01020008000200ac1e000108000100f3ff1f00400005003c000100000000800d000000000200003ba30000050000000902fcff0300f7ff008000000400ffff367501fca74000088000000000000000fdffffff240106002001030000001000010074756e6e656c5f6b65790000180002001400050000000000000000000000000000000000f00006008d3d151876b2ee8699120f255e40ff4404d15d60deb27e144bd382f5fb59542c35b0e2114ab24813debcf1a4f1fec10526a2e58803d914b145c0bb20dee4cd3c1766330659feae0e5a39c7ada192073b5f87a827050944790bf8753de96cc6e5f2ffc7f470d9e4e0c3618d3002c194a15f43fa93a9970c4bce94b4a34ccdb2c83213d0868b85cb578f6892a2dc9dc4a46315cc5c8e86735b54c70a30285e3504ef2d479401331d45ae3d34ff7ec20ccfafd9b22af757fb850155f44a4fbe09f323cfd96509536b9398d05112b027cb76b7a12f17aad9c86e8342b0aef94c44388ce66a9cec8afdc5ad4d000000000c000500080005008000000008000300ffffffff08000b0001000080"], 0x2b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004044)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x40000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

20:28:44 executing program 1:
r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e210000010000000000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22e4f4c2280c0a702a3a2967427a715249537044f53a011332e5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

20:28:44 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00\x00\x00\x00\x00\x88\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8)

20:28:44 executing program 2:
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)

[  566.270033][T15503] IPVS: ftp: loaded support on port[0] = 21
20:28:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="0512f6a0"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:44 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
rmdir(&(0x7f00000001c0)='./file0\x00')
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00')

20:28:44 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r3, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f]}, 0x2c)

[  566.843082][   T17] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  566.937533][T15503] IPVS: ftp: loaded support on port[0] = 21
[  567.223219][   T17] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  567.231497][   T17] usb 2-1: config 0 has no interface number 0
[  567.238055][   T17] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  567.249153][   T17] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  567.333237][   T17] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15
[  567.342533][   T17] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0
[  567.351101][   T17] usb 2-1: Manufacturer: syz
[  567.357224][   T17] usb 2-1: config 0 descriptor??
[  567.398239][   T17] usb 2-1: BUG? WUSB host has no security descriptors
[  567.406847][   T17] hwa-hc 2-1:0.66: Wireless USB HWA host controller
[  567.415796][   T17] hwa-hc 2-1:0.66: new USB bus registered, assigned bus number 41
[  568.033285][   T17] hwa-hc 2-1:0.66: Wireless USB Cluster ID set to 0xfe
[  568.041517][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (0000000001e5a7da [0000000001e5a7da], 8006, f00, 0, 000000009feff415, 5) UNIMPLEMENTED
[  568.057791][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (0000000001e5a7da [0000000001e5a7da], 8006, f00, 0, 000000009feff415, 5) UNIMPLEMENTED
[  568.072035][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (0000000001e5a7da [0000000001e5a7da], 8006, f00, 0, 000000009feff415, 5) UNIMPLEMENTED
[  568.086573][   T17] usb usb41: unable to get BOS descriptor or descriptor too short
[  568.096287][   T17] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04
[  568.105792][   T17] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  568.114882][   T17] usb usb41: Product: Wireless USB HWA host controller
[  568.121800][   T17] usb usb41: Manufacturer: Linux 5.4.0-rc3+ hwa-hcd
[  568.128672][   T17] usb usb41: SerialNumber: wusb-hwa
[  568.137696][   T17] hub 41-0:1.0: USB hub found
[  568.143087][   T17] hub 41-0:1.0: 1 port detected
[  568.245841][   T17] usb 2-1: USB disconnect, device number 9
[  568.252613][   T17] hwa-hc 2-1:0.66: remove, state 1
[  568.258057][   T17] usb usb41: USB disconnect, device number 1
[  568.269561][   T17] hwa-hc 2-1:0.66: USB bus 41 deregistered
20:28:46 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b0000000100ff0714000000450001070000001419001a00120202000e00010020000300"/57, 0x39}], 0x1)

20:28:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235002000000f3066baf80cb89faa1685ef66bafc0cecc4027d1d09f2460f092e360f01c9660fd7cec4623902560344dae943ddea8f09e89a0cd7", 0x41}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:46 executing program 0:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x181040, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x0, r0}, 0x3c)
r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000))

20:28:46 executing program 2:
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)

[  568.945858][T15524] IPVS: ftp: loaded support on port[0] = 21
20:28:47 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r0}, 0x68)
r1 = open(0x0, 0x86240, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x12}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60010000100013070000000000000000fe800000000000000000000700000000000000000000007cd72bf736b5c3e7bd823897f0ffffff21000000000000000000000000000000000000000088783f418a32", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x44, 0x0, 0x0, 0x0, 0xf801, &(0x7f0000000080)='lo\x00', 0x8, 0x4e, 0x5})
bind$inet(0xffffffffffffffff, 0x0, 0x5e)
preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0)

[  569.075348][   T17] usb 2-1: new high-speed USB device number 10 using dummy_hcd
20:28:47 executing program 5:
unshare(0x8000400)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/169)

[  569.573572][   T17] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  569.581802][   T17] usb 2-1: config 0 has no interface number 0
[  569.588114][   T17] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  569.601140][   T17] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping
20:28:47 executing program 1:
r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e210000010000000000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22e4f4c2280c0a702a3a2967427a715249537044f53a011332e5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[  569.823839][   T17] usb 2-1: string descriptor 0 read error: -71
[  569.830270][   T17] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15
[  569.839822][   T17] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0
20:28:47 executing program 2:
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)

20:28:47 executing program 4:
io_setup(0x1, &(0x7f0000000140)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0])

20:28:47 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x5)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

20:28:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac)
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8})
r1 = inotify_init()
r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082)
socket$inet6_tcp(0xa, 0x1, 0x0)
getgid()
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r2, r2, &(0x7f0000000080)=0x2, 0xa198)

20:28:47 executing program 5:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00')
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247)
sendfile(r1, r0, 0x0, 0x1f7)

[  569.976667][   T17] usb 2-1: config 0 descriptor??
[  570.007593][   T17] usb 2-1: can't set config #0, error -71
[  570.024266][T15554] IPVS: ftp: loaded support on port[0] = 21
[  570.031327][   T17] usb 2-1: USB disconnect, device number 10
20:28:48 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f4070009042400000000fd00000200000000", 0x1c)

[  570.485684][   T17] usb 2-1: new high-speed USB device number 11 using dummy_hcd
20:28:48 executing program 5:
r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x6, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000000eff4))
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)

20:28:48 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x80044dff, 0x717000)

20:28:48 executing program 2:
faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)

20:28:48 executing program 4:
io_setup(0x1, &(0x7f0000000140)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0])

[  570.863393][   T17] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  570.871818][   T17] usb 2-1: config 0 has no interface number 0
[  570.878313][   T17] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  570.889489][   T17] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping
20:28:49 executing program 5:
socket$nl_xfrm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x7, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[  571.150373][T15588] IPVS: ftp: loaded support on port[0] = 21
[  571.243231][   T17] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15
[  571.252503][   T17] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0
[  571.261123][   T17] usb 2-1: Manufacturer: syz
[  571.274318][   T17] usb 2-1: config 0 descriptor??
[  571.321674][   T17] usb 2-1: BUG? WUSB host has no security descriptors
[  571.331630][   T17] hwa-hc 2-1:0.66: Wireless USB HWA host controller
[  571.343312][   T17] hwa-hc 2-1:0.66: new USB bus registered, assigned bus number 41
[  571.963274][   T17] hwa-hc 2-1:0.66: Wireless USB Cluster ID set to 0xfe
[  571.970678][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (00000000ff6cf872 [00000000ff6cf872], 8006, f00, 0, 00000000bd01da6c, 5) UNIMPLEMENTED
[  571.985146][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (00000000ff6cf872 [00000000ff6cf872], 8006, f00, 0, 00000000bd01da6c, 5) UNIMPLEMENTED
[  571.999502][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (00000000ff6cf872 [00000000ff6cf872], 8006, f00, 0, 00000000bd01da6c, 5) UNIMPLEMENTED
[  572.015307][   T17] usb usb41: unable to get BOS descriptor or descriptor too short
[  572.026397][   T17] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04
[  572.035917][   T17] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  572.044237][   T17] usb usb41: Product: Wireless USB HWA host controller
[  572.051953][   T17] usb usb41: Manufacturer: Linux 5.4.0-rc3+ hwa-hcd
[  572.058912][   T17] usb usb41: SerialNumber: wusb-hwa
[  572.067745][   T17] hub 41-0:1.0: USB hub found
[  572.073675][   T17] hub 41-0:1.0: 1 port detected
[  572.176140][   T17] usb 2-1: USB disconnect, device number 11
[  572.184747][   T17] hwa-hc 2-1:0.66: remove, state 1
[  572.189975][   T17] usb usb41: USB disconnect, device number 1
[  572.201129][   T17] hwa-hc 2-1:0.66: USB bus 41 deregistered
20:28:50 executing program 1:
r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e210000010000000000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22e4f4c2280c0a702a3a2967427a715249537044f53a011332e5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

20:28:50 executing program 5:
socket$nl_xfrm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x7, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

20:28:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac)
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8})
r1 = inotify_init()
r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082)
socket$inet6_tcp(0xa, 0x1, 0x0)
getgid()
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r2, r2, &(0x7f0000000080)=0x2, 0xa198)

20:28:50 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xff000000, 0x27}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48)

20:28:50 executing program 4:
io_setup(0x1, &(0x7f0000000140)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0])

20:28:50 executing program 2:
r0 = socket$inet(0x10, 0x3, 0x20000000006)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
read(r0, &(0x7f00000002c0)=""/207, 0xcf)

20:28:50 executing program 5:
socket$nl_xfrm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x7, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

20:28:51 executing program 2:
r0 = socket$inet(0x10, 0x3, 0x20000000006)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
read(r0, &(0x7f00000002c0)=""/207, 0xcf)

20:28:51 executing program 4:
io_setup(0x1, &(0x7f0000000140)=<r0=>0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0])

20:28:51 executing program 5:
socket$nl_xfrm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x7, 0xffffff87, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[  573.053408][   T17] usb 2-1: new high-speed USB device number 12 using dummy_hcd
20:28:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x200000000000000}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xd8}}, 0x0)

20:28:51 executing program 2:
r0 = socket$inet(0x10, 0x3, 0x20000000006)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
read(r0, &(0x7f00000002c0)=""/207, 0xcf)

[  573.423199][   T17] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  573.432259][   T17] usb 2-1: config 0 has no interface number 0
[  573.438707][   T17] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  573.450014][   T17] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  573.603745][   T17] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15
[  573.613115][   T17] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0
[  573.621969][   T17] usb 2-1: Manufacturer: syz
[  573.695728][   T17] usb 2-1: config 0 descriptor??
[  573.741769][   T17] usb 2-1: BUG? WUSB host has no security descriptors
[  573.758788][   T17] hwa-hc 2-1:0.66: Wireless USB HWA host controller
[  573.772423][   T17] hwa-hc 2-1:0.66: new USB bus registered, assigned bus number 41
[  574.393137][   T17] hwa-hc 2-1:0.66: Wireless USB Cluster ID set to 0xfe
[  574.400500][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (0000000087b91139 [0000000087b91139], 8006, f00, 0, 0000000086911bbc, 5) UNIMPLEMENTED
[  574.414687][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (0000000087b91139 [0000000087b91139], 8006, f00, 0, 0000000086911bbc, 5) UNIMPLEMENTED
[  574.427934][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (0000000087b91139 [0000000087b91139], 8006, f00, 0, 0000000086911bbc, 5) UNIMPLEMENTED
[  574.442316][   T17] usb usb41: unable to get BOS descriptor or descriptor too short
[  574.452035][   T17] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04
[  574.461464][   T17] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  574.469816][   T17] usb usb41: Product: Wireless USB HWA host controller
[  574.476866][   T17] usb usb41: Manufacturer: Linux 5.4.0-rc3+ hwa-hcd
[  574.483650][   T17] usb usb41: SerialNumber: wusb-hwa
[  574.491940][   T17] hub 41-0:1.0: USB hub found
[  574.497445][   T17] hub 41-0:1.0: 1 port detected
[  574.605970][    T5] usb 2-1: USB disconnect, device number 12
[  574.613153][    T5] hwa-hc 2-1:0.66: remove, state 1
[  574.618450][    T5] usb usb41: USB disconnect, device number 1
[  574.629901][    T5] hwa-hc 2-1:0.66: USB bus 41 deregistered
20:28:53 executing program 1:
r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052638f40937f115615400e0000010902440001000000000904420004e0020100090584033e3300000009050f0040000000000905070000000000000905000000000000000e210000010000000000004a2f72801e876031fabb12d8dae6acb89d5f770f719977e1dae22e4f4c2280c0a702a3a2967427a715249537044f53a011332e5bf9953a1ae88007adca882cc5a4a030c0c9b67338dd549d72d4877fd223dbe580811bfb2dcc2ad4f3a67f4d4c5644"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

20:28:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="480fc75ef8b805000000b91a98316e0f01c1b9800000c00f3235008000000f300f20c035000000400f22c00f01f836ddc53e450f01d1460f09dc9233780000b805000000b9005000000f01c1", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

20:28:53 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000040)=""/107, 0x6b}], 0x2)

20:28:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="baa00066ed6566660f3815550d66b9710500000f320f090f788d07000f303efae0000fc77d54640f01980300", 0x2c}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:53 executing program 2:
r0 = socket$inet(0x10, 0x3, 0x20000000006)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
read(r0, &(0x7f00000002c0)=""/207, 0xcf)

20:28:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac)
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8})
r1 = inotify_init()
r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082)
socket$inet6_tcp(0xa, 0x1, 0x0)
getgid()
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r2, r2, &(0x7f0000000080)=0x2, 0xa198)

20:28:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))

20:28:53 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x46, 0x30, 0xe, 0x8, 0x2c7c, 0x512, 0x882d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc8, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x85}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0)

[  575.495842][   T17] usb 2-1: new high-speed USB device number 13 using dummy_hcd
20:28:53 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ARP_IP_TARGET={0x10, 0x8, [@rand_addr=0x9000000, @rand_addr, @empty]}]}}}]}, 0x44}}, 0x0)

20:28:53 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))

[  575.698583][T15662] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  575.709420][T15662] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  575.743596][    T5] usb 3-1: new high-speed USB device number 12 using dummy_hcd
20:28:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="baa00066ed6566660f3815550d66b9710500000f320f090f788d07000f303efae0000fc77d54640f01980300", 0x2c}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:53 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  575.893285][   T17] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  575.901526][   T17] usb 2-1: config 0 has no interface number 0
[  575.907933][   T17] usb 2-1: config 0 interface 66 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  575.919101][   T17] usb 2-1: config 0 interface 66 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  575.985305][    T5] usb 3-1: Using ep0 maxpacket: 8
[  576.103952][    T5] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  576.113104][    T5] usb 3-1: config 0 has no interface number 0
[  576.119394][    T5] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=88.2d
[  576.128713][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.135643][   T17] usb 2-1: New USB device found, idVendor=7f93, idProduct=5611, bcdDevice=40.15
[  576.146169][   T17] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0
[  576.154923][   T17] usb 2-1: Manufacturer: syz
[  576.176480][    T5] usb 3-1: config 0 descriptor??
[  576.203124][   T17] usb 2-1: config 0 descriptor??
[  576.227169][    T5] option 3-1:0.200: GSM modem (1-port) converter detected
[  576.251240][   T17] usb 2-1: BUG? WUSB host has no security descriptors
[  576.283769][   T17] hwa-hc 2-1:0.66: Wireless USB HWA host controller
[  576.299382][   T17] hwa-hc 2-1:0.66: new USB bus registered, assigned bus number 41
[  576.429770][    T5] usb 3-1: USB disconnect, device number 12
[  576.437693][    T5] option 3-1:0.200: device disconnected
[  576.893124][   T17] hwa-hc 2-1:0.66: Wireless USB Cluster ID set to 0xfe
[  576.900539][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (00000000ff6cf872 [00000000ff6cf872], 8006, f00, 0, 000000001836aae5, 5) UNIMPLEMENTED
[  576.915443][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (00000000ff6cf872 [00000000ff6cf872], 8006, f00, 0, 000000001836aae5, 5) UNIMPLEMENTED
[  576.928685][   T17] hwa-hc 2-1:0.66: wusbhc_rh_control (00000000ff6cf872 [00000000ff6cf872], 8006, f00, 0, 000000001836aae5, 5) UNIMPLEMENTED
[  576.944307][   T17] usb usb41: unable to get BOS descriptor or descriptor too short
[  576.955027][   T17] usb usb41: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04
[  576.964518][   T17] usb usb41: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[  576.972817][   T17] usb usb41: Product: Wireless USB HWA host controller
[  576.980101][   T17] usb usb41: Manufacturer: Linux 5.4.0-rc3+ hwa-hcd
[  576.986947][   T17] usb usb41: SerialNumber: wusb-hwa
[  576.996555][   T17] hub 41-0:1.0: USB hub found
[  577.001660][   T17] hub 41-0:1.0: 1 port detected
[  577.106168][   T17] usb 2-1: USB disconnect, device number 13
[  577.113612][   T17] hwa-hc 2-1:0.66: remove, state 1
[  577.118847][   T17] usb usb41: USB disconnect, device number 1
[  577.130229][   T17] hwa-hc 2-1:0.66: USB bus 41 deregistered
[  577.213099][    T5] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  577.453062][    T5] usb 3-1: Using ep0 maxpacket: 8
20:28:55 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="baa00066ed6566660f3815550d66b9710500000f320f090f788d07000f303efae0000fc77d54640f01980300", 0x2c}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))

20:28:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020036226c8251f9a0d4d462356d122d12cfcf1c3d30fdbc6a000000000002f660e5", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x2c, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x3ac)
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000440)={0x9, 0xffffff00, 0xfffffffe, 'queue0\x00', 0x8})
r1 = inotify_init()
r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082)
socket$inet6_tcp(0xa, 0x1, 0x0)
getgid()
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r2, r2, &(0x7f0000000080)=0x2, 0xa198)

[  577.573331][    T5] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  577.581925][    T5] usb 3-1: config 0 has no interface number 0
[  577.588301][    T5] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=88.2d
[  577.597765][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.607785][    T5] usb 3-1: config 0 descriptor??
20:28:55 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  577.676988][    T5] option 3-1:0.200: GSM modem (1-port) converter detected
[  577.875101][    T5] usb 3-1: USB disconnect, device number 13
[  577.883193][    T5] option 3-1:0.200: device disconnected
20:28:56 executing program 1:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1bab", 0x1f}], 0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="1f", 0x1)
sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

20:28:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))

[  577.994484][T15692] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
20:28:56 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4)
close(r0)

20:28:56 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SMI(r2, 0xaeb7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="baa00066ed6566660f3815550d66b9710500000f320f090f788d07000f303efae0000fc77d54640f01980300", 0x2c}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:28:56 executing program 5:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20}, 0x20}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/30)

20:28:56 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff0e, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

20:28:56 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4)
close(r0)

20:28:56 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x162)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'sh\x00', 0x0, 0x80000000}, 0x2c)

[  578.817192][T15695] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
20:28:56 executing program 4:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x40000000012, 0x0, @thr={&(0x7f0000000380), &(0x7f0000000180)}}, &(0x7f0000000300))
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='cmdline\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

20:28:57 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x0, 0x6, "b9e822431488"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

20:28:57 executing program 1:
r0 = socket(0x15, 0x80005, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x200000000114, 0x0, 0x0, &(0x7f0000000180))

20:28:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0)
r4 = dup2(r0, r2)
dup3(r4, r1, 0x0)

20:28:57 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4)
close(r0)

20:28:57 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x104000, 0x0)

20:28:57 executing program 4:
unshare(0x20400)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, 0x0)

20:28:57 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="e1affde3", 0x4)
close(r0)

[  579.385075][   T17] usb 4-1: new high-speed USB device number 7 using dummy_hcd
20:28:57 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x104000, 0x0)

20:28:57 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xd7, 0x0, &(0x7f0000000000))

20:28:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x33, 0x119, 0x0, 0x0, {0x1}, [@generic="ffd38d9b", @typed={0x8, 0xa, @ipv4=@empty}]}, 0x20}}, 0x0)

20:28:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x28, 0x2}, 0x10}}, 0x0)

20:28:57 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0x0, 0x20}, &(0x7f0000000240)=0x18)

[  579.599463][T15762] openvswitch: netlink: Flow key attr not present in new flow.
[  579.633427][   T17] usb 4-1: Using ep0 maxpacket: 16
[  579.756971][   T17] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[  579.766443][   T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.832473][   T17] usb 4-1: config 0 descriptor??
[  580.093206][   T17] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  580.753143][   T17] usb write operation failed. (-71)
[  580.761412][   T17] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  580.773845][   T17] dvbdev: DVB: registering new adapter (Terratec H7)
[  580.780861][   T17] usb 4-1: media controller created
[  580.803116][   T17] usb read operation failed. (-71)
[  580.823161][   T17] usb write operation failed. (-71)
[  580.831293][   T17] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  580.841557][   T17] usb 4-1: USB disconnect, device number 7
[  581.503036][   T17] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  581.742973][   T17] usb 4-1: Using ep0 maxpacket: 16
[  581.863334][   T17] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[  581.872593][   T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.882612][   T17] usb 4-1: config 0 descriptor??
[  582.143058][   T17] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
20:29:00 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x0, 0x6, "b9e822431488"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

20:29:00 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x104000, 0x0)

20:29:00 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc08c5114, &(0x7f0000000300)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

20:29:00 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e)

20:29:00 executing program 2:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

20:29:00 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x1c)
sendmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000018c0)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x1)

[  582.288154][   T17] usb write operation failed. (-71)
[  582.305326][   T17] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  582.316211][   T17] dvbdev: DVB: registering new adapter (Terratec H7)
[  582.323161][   T17] usb 4-1: media controller created
20:29:00 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@sndrcv={0x12, 0x84, 0x6}], 0x30}], 0x1, 0x0)

[  582.414448][   T17] usb read operation failed. (-71)
20:29:00 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x104000, 0x0)

20:29:00 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x1c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14)

[  582.445274][   T17] usb write operation failed. (-71)
20:29:00 executing program 4:
r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x0, "bb71743d51d51b07f53548904ad0ac247555a8a5a8e2546c3e0da4308517715f"})

[  582.473907][   T17] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  582.596553][   T17] usb 4-1: USB disconnect, device number 8
20:29:00 executing program 2:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

20:29:00 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

[  583.013116][   T17] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  583.263180][   T17] usb 4-1: Using ep0 maxpacket: 16
[  583.383370][   T17] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[  583.392674][   T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.402481][   T17] usb 4-1: config 0 descriptor??
[  583.663335][   T17] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  584.323061][   T17] usb write operation failed. (-71)
[  584.331289][   T17] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  584.342314][   T17] dvbdev: DVB: registering new adapter (Terratec H7)
[  584.349355][   T17] usb 4-1: media controller created
[  584.373183][   T17] usb read operation failed. (-71)
[  584.393068][   T17] usb write operation failed. (-71)
[  584.401134][   T17] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  584.411116][   T17] usb 4-1: USB disconnect, device number 9
20:29:02 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x0, 0x6, "b9e822431488"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

20:29:02 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000880)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYPTR, @ANYBLOB='J\x00\x00\x00', @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="050f4a0004141004048a873fa9bba1dd9e878cc6fa09724686071002"], @ANYBLOB="0800000004000000", @ANYPTR, @ANYBLOB="02000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="0203"]])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

20:29:02 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x4)

20:29:02 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x8001)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000004ff4)={0x2000001c})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100))
ppoll(&(0x7f0000000080)=[{r2}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

20:29:02 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

20:29:02 executing program 2:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

20:29:03 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

20:29:03 executing program 2:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

20:29:03 executing program 1:
mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4)
setresuid(0x0, r3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@empty, @multicast2, 0x1, 0x2, [@local, @local]}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
write$binfmt_script(r1, &(0x7f0000000780)=ANY=[], 0x0)
sendfile(r1, r2, 0x0, 0x20000102000007)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local, 0x0, 0x0, 0x2000}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0)
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x7f0883aaa975855c, @reserved}, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)="bb6d34fce4773c99d029800b907a2163dd40e460a1e0af431b217e773c8743c5987e1f125741e59ab1b1fe95f50938908ed5584de48d2fc3bf5f40561b8ac30116442b33219827882ac2b7ed9cf581bf", 0x50}, {&(0x7f00000004c0)="08d7c8968b3aa0d43c26c779e836cdf6327fa73cb7a096f7fc4dd630f1ba3462f70da8686ea83d8b667318a780c8048ad50dbb53c9c9705d0634a6fbaf1a50a2e615f6c41190ac76710caeafb85619b0283a80adf7d37a60a12b05140c47d3807e2786ed4f50c2a6f889be9e2440c6", 0x6f}, {&(0x7f0000000540)="de500f9adaca665a25182a827a87f7f8275ab46359c3b214ddbcc98db611c4185f987f285bdd80d27e9f380e9f685ce27b0879585b3c7515601bc797292120172bd215f9640f880205455257eb5937dd5a44da8aff0adc69b806f2726824c82b5addfdd1eda28063f6889ca99ff1dbfa19757593ad29d8cafeae8cec54917a674ad62792751562dbcbe36a00caeab17586d6e744f3f1d44e875e5e78d23d3bbb0a425ca9d6082a6ec7104c798791b0de1c7edea96d", 0xb5}, {&(0x7f0000000600)="8687b600a58aae4f8fc8c8381bf0721409bf8a1ebc7adc987bcbc82d2606814b40bc6acc390a2a534ee45a050ccf8f31baf265ca87817ce097eabafbcc9902c371e08e1590760752031ea69ffb8f6c8558fcf674a42ad070c75b7ad96719509c689f76fc086a30a9ab855ff019a7fb0b73a9ddb3b4664206cbe1a9d639efe7b6e6898a17643b0ee3fe236377d069a343a0496b9bed43798b81e73d97bcc71b723a05bbd4201ce801ebac2008a487e527cec104fe6aa8217283787248", 0xbc}, {&(0x7f0000000080)="beed0dcb23ea917c794f01a13b2066ebddf434497612f81c49d78c8137f62007f10c1b9ed734c6ce29b11fa710c5ff824e70ea3b9f5d33df1c6a4d5e", 0x3c}, {&(0x7f00000006c0)="45b2b18da9cb999ae9f1c4b62f8fa7021d58f516158c58f26f3c7e52872779710bfcd80ad6cf4af09c74c003f68ae514a277cd007b8b3b42e1f3ead91efbda49f657aba32932c0ba01241d4f8b51", 0x4e}, {&(0x7f0000000740)="d8f4639ac3788883b0ba71c7e42b6202842cd8c5fafe7a388bc39125eb376d4df69718b9c79eee7f276dbc150c668bb3aaba2c00f664dca0c2b4c2b42437da1aeccaf3d15d98e36295d04d74251ec9f262e2c48a315089f958db918117612322418b6588365b17140f5ba0107acc579cc2e3984fba0f2fc0800a02a1ce25556cbb5e261b6a8b4774f881c85afc77957b4bf8bbcb72983310481bec86e6467e220d375e7289316ca3296d8ca9a61ba1683a55625da4c3265f39fa681f4c1fa8b13c3b4e3648bd749402673a49dcb980cd1b068103691ed35aba13a5e5fd3cdb4cd6df420aa0b9", 0xe6}], 0x7, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0xc6}}, @mark={{0x14, 0x1, 0x24, 0xdd}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x582}}], 0xc0}}], 0x1, 0x4048084)
socket(0x10, 0x2, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r8 = dup2(0xffffffffffffffff, r7)
dup3(r8, r6, 0x0)

20:29:03 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x4)

20:29:03 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xa8, 0x9f, 0xc2, 0x8, 0x6993, 0xb001, 0x3515, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

[  585.176287][    T5] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  585.192978][   T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd
20:29:03 executing program 2:
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
fadvise64(r0, 0x0, 0xffffffffffffff50, 0x0)

[  585.423432][    T5] usb 6-1: Using ep0 maxpacket: 32
[  585.453321][   T17] usb 4-1: Using ep0 maxpacket: 16
[  585.543177][    T5] usb 6-1: descriptor type invalid, skip
[  585.549013][    T5] usb 6-1: descriptor type invalid, skip
[  585.563329][T11736] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  585.583361][   T17] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[  585.592949][   T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.602531][   T17] usb 4-1: config 0 descriptor??
[  585.633432][    T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.644977][    T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  585.655231][    T5] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  585.863277][   T17] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  585.903180][    T5] usb 6-1: language id specifier not provided by device, defaulting to English
[  585.933149][T11736] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[  585.941451][T11736] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.952454][T11736] usb 5-1: config 0 has no interface number 0
[  585.958938][T11736] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  585.969300][T11736] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=35.15
[  585.978499][T11736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.988170][T11736] usb 5-1: config 0 descriptor??
[  586.037505][T11736] yealink 5-1:0.57: invalid payload size 0, expected 16
[  586.046352][T11736] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.57/input/input47
[  586.343362][T11736] usb 5-1: USB disconnect, device number 23
[  586.352993][    C1] yealink 5-1:0.57: urb_ctl_callback - urb status -2
[  586.463287][    T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  586.472580][    T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.513493][   T17] usb write operation failed. (-71)
[  586.521905][   T17] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  586.533221][   T17] dvbdev: DVB: registering new adapter (Terratec H7)
[  586.540123][   T17] usb 4-1: media controller created
[  586.564466][   T17] usb read operation failed. (-71)
[  586.583186][   T17] usb write operation failed. (-71)
[  586.591843][   T17] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  586.602533][   T17] usb 4-1: USB disconnect, device number 10
[  586.773380][    T5] cdc_ncm 6-1:1.0: bind() failure
[  586.783425][    T5] cdc_ncm 6-1:1.1: bind() failure
[  586.794889][    T5] usb 6-1: USB disconnect, device number 11
20:29:05 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)={0x0, 0x0, 0x6, "b9e822431488"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

[  587.003183][T11797] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  587.333136][    T5] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  587.373311][T11797] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[  587.381507][T11797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.391935][T11797] usb 5-1: config 0 has no interface number 0
[  587.398404][T11797] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  587.408673][T11797] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=35.15
[  587.418220][T11797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.428308][T11797] usb 5-1: config 0 descriptor??
[  587.477264][T11797] yealink 5-1:0.57: invalid payload size 0, expected 16
[  587.485728][T11797] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.57/input/input48
[  587.523046][   T17] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  587.623005][    T5] usb 4-1: Using ep0 maxpacket: 16
[  587.743203][    T5] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[  587.752654][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.763027][    T5] usb 4-1: config 0 descriptor??
[  587.777522][T11797] usb 5-1: USB disconnect, device number 24
[  587.792966][    C0] yealink 5-1:0.57: urb_ctl_callback - urb status -2
[  587.794070][   T17] usb 6-1: Using ep0 maxpacket: 32
[  587.923219][   T17] usb 6-1: descriptor type invalid, skip
[  587.929048][   T17] usb 6-1: descriptor type invalid, skip
[  588.013493][   T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.023266][    T5] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  588.024924][   T17] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  588.041870][   T17] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
20:29:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000003}]})

20:29:06 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00')
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendfile(r2, r1, 0x0, 0x1000)

20:29:06 executing program 1:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0)

20:29:06 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x4)

20:29:06 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xa8, 0x9f, 0xc2, 0x8, 0x6993, 0xb001, 0x3515, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

[  588.283292][   T17] usb 6-1: string descriptor 0 read error: -71
[  588.289823][   T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  588.299067][   T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.355219][   T17] usb 6-1: can't set config #1, error -71
[  588.384159][   T17] usb 6-1: USB disconnect, device number 12
20:29:06 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$kcm(0xa, 0x2, 0x73)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f0000008380), 0x314, 0x0, &(0x7f0000008600)={0x0, 0x989680})

20:29:06 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x4)

20:29:06 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newsa={0x13c, 0x10, 0xd, 0x0, 0x0, {{@in, @in6}, {@in=@local, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

20:29:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000680200000000002200000000000042"])

[  588.593000][T11736] usb 2-1: new high-speed USB device number 14 using dummy_hcd
20:29:06 executing program 0:
unshare(0x400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x539c]})

[  588.643663][ T3381] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  588.683437][    T5] usb write operation failed. (-71)
20:29:06 executing program 5:
syz_emit_ethernet(0x403, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0xb, {0x3c7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x3f000000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

[  588.694107][    T5] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  588.704914][    T5] dvbdev: DVB: registering new adapter (Terratec H7)
[  588.711841][    T5] usb 4-1: media controller created
[  588.756681][    T5] usb read operation failed. (-71)
[  588.774052][    T5] usb write operation failed. (-71)
[  588.788351][    T5] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  588.844713][    T5] usb 4-1: USB disconnect, device number 11
[  588.863164][T11736] usb 2-1: Using ep0 maxpacket: 32
[  588.983486][T11736] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  588.996681][T11736] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  589.006095][T11736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.015528][T11736] usb 2-1: config 0 descriptor??
[  589.023397][ T3381] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[  589.031623][ T3381] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.042053][ T3381] usb 5-1: config 0 has no interface number 0
[  589.048257][ T3381] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  589.058684][ T3381] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=35.15
[  589.067882][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.084420][ T3381] usb 5-1: config 0 descriptor??
[  589.127572][ T3381] yealink 5-1:0.57: invalid payload size 0, expected 16
[  589.136701][ T3381] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.57/input/input49
20:29:07 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x80002003})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0))
epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0)

20:29:07 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x100000001, 0x4, 0x100000001, 0x0, r0}, 0x2c)
dup2(r0, r1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)

20:29:07 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000004540))

[  589.269195][T11736] usb 2-1: USB disconnect, device number 14
[  589.457301][ T3381] usb 5-1: USB disconnect, device number 25
[  589.472954][    C1] yealink 5-1:0.57: urb_ctl_callback - urb status -2
[  590.053032][T11797] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  590.292980][T11797] usb 2-1: Using ep0 maxpacket: 32
[  590.413162][T11797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  590.427055][T11797] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  590.436393][T11797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.445883][T11797] usb 2-1: config 0 descriptor??
[  590.684847][ T3381] usb 2-1: USB disconnect, device number 15
20:29:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$unix(r1, &(0x7f0000000240), 0xffffffffffffff8e, 0x0, 0x0, 0x15f)

20:29:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100339d000000000000000300000000", @ANYRES32=r1, @ANYBLOB="8465166c72520b197acdb4"], 0x20}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0xf8, 0x0)

20:29:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000540)={0xfff})
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x80003})

20:29:09 executing program 0:
r0 = semget$private(0x0, 0x7, 0x0)
semop(r0, &(0x7f0000000240)=[{0x1, 0x6}, {0x0, 0x0, 0x1800}, {0x1, 0xfffffffffffffff8}], 0x3)
semop(r0, &(0x7f0000000240), 0x2)

20:29:09 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
times(&(0x7f0000000140))

20:29:09 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xa8, 0x9f, 0xc2, 0x8, 0x6993, 0xb001, 0x3515, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

20:29:09 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000006fa8)={{0x50f}, 0x1, 0xfffffdfd})

20:29:09 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae4351b0c84eba48cc4c26bed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03", 0x65}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x1e)

20:29:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="640ff24101660f08f20f1bfa0f20e06635000040000f22e0bad004b00fee36260f01dfaa8fc900010b0f080f005b9a", 0x2f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
poll(0x0, 0x0, 0x0)

20:29:09 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0x8}, 0x10)

[  591.516627][T11797] usb 5-1: new low-speed USB device number 26 using dummy_hcd
20:29:09 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mlock(&(0x7f0000000000/0xf000)=nil, 0xf000)
mlock2(&(0x7f0000001000/0x8000)=nil, 0x8000, 0x0)

20:29:09 executing program 1:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000fc3000/0xe000)=nil)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

20:29:09 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})

20:29:09 executing program 3:
r0 = socket$inet(0x2, 0x80a, 0x0)
r1 = socket$inet(0x2, 0x80a, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r3], 0x18}, 0x0)
close(r3)
connect$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)

[  591.885995][T15960] bond0: (slave bond_slave_1): Releasing backup interface
[  591.925453][T11797] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
20:29:10 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]')
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r2, r1, 0x0, 0x80000000000003)

[  591.933912][T11797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.944273][T11797] usb 5-1: config 0 has no interface number 0
[  591.950492][T11797] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  591.961035][T11797] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=35.15
[  591.970338][T11797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.035785][T11797] usb 5-1: config 0 descriptor??
[  592.086297][T15965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.100384][T11797] yealink 5-1:0.57: invalid payload size 0, expected 16
[  592.108957][T11797] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.57/input/input50
20:29:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001580)={0x1, 0x2, 0x0, "0b35d411ddafb672b182b9f87cdb6e17eea029462d0de20000001800"})

[  592.145971][T15960] bond0: (slave bond_slave_1): Releasing backup interface
20:29:10 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0x9b, 0x0, &(0x7f0000000000))

[  592.398447][T15965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.421214][T11797] usb 5-1: USB disconnect, device number 26
[  592.433055][    C0] yealink 5-1:0.57: urb_ctl_callback - urb status -2
20:29:10 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae4351b0c84eba48cc4c26bed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03", 0x65}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x1e)

20:29:10 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xa8, 0x9f, 0xc2, 0x8, 0x6993, 0xb001, 0x3515, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x39, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

20:29:10 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x10, r0, 0x0)
socket(0x11, 0x0, 0xfffffffffffffffe)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
dup3(r1, r1, 0x80000)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=""/69, &(0x7f00000003c0)=""/108, 0x0, 0x3000})
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbe3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r2, r3)

20:29:10 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x30, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0)

20:29:10 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000380)={[], 0x0, 0x400})

20:29:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4b, 0x18}})

20:29:11 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040))

20:29:11 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2f77, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x3}}, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x400000000000384, 0x12001, 0x0)

20:29:11 executing program 3:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="f3da50ad25ea3f394e563132fd0091b1baf64d4d419ff12a746016c1fecaedfee5bcd406449c7dfb67a6376bfad9d4a2cace503dfd2ef2e92d8e21897a4a4e77c3d4c36143bb4c61ef7efbd2738273d0ebbed96cac0c5da684703b3a318293603207c3590d5cf5c4550f87561475bb7ea0d7f9c01403eadb72acdf8854f4323d09d9c9a859a8ba9774d5b525d6bc9eb370a7e09e58f371a2365d8b2b911ca49e449e6b104af537b924b12952c2828a7a3ab8da75cb2b0b6eb0436d7f7985f969ba77e364ad403773"})

20:29:11 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae4351b0c84eba48cc4c26bed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03", 0x65}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x1e)

20:29:11 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

20:29:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20:29:11 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000240)={0x8098f908, 0x0, "b11e6a9a369f1f3522fb27afb08fa360211177aafa0ea118a04b2daf63c12496"})

[  593.183727][T11797] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  593.553339][T11797] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[  593.561638][T11797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.572137][T11797] usb 5-1: config 0 has no interface number 0
[  593.578901][T11797] usb 5-1: config 0 interface 57 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  593.589105][T11797] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=35.15
[  593.598319][T11797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.608450][T11797] usb 5-1: config 0 descriptor??
[  593.658133][T11797] yealink 5-1:0.57: invalid payload size 0, expected 16
[  593.667696][T11797] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.57/input/input51
[  593.967017][T11797] usb 5-1: USB disconnect, device number 27
[  593.982964][    C0] yealink 5-1:0.57: urb_ctl_callback - urb status -2
20:29:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006a005180836f868e0000000002"], 0x18}}, 0x4)

20:29:12 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
socket$inet6(0xa, 0x803, 0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00L'})

20:29:12 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18)

20:29:12 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

20:29:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae4351b0c84eba48cc4c26bed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03", 0x65}], 0x4, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
tkill(r1, 0x1e)

20:29:12 executing program 4:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

[  594.451665][T16049] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.459785][T16049] bridge0: port 1(bridge_slave_0) entered disabled state
20:29:12 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), 0x4)

20:29:12 executing program 3:
unshare(0x40600)
r0 = socket$inet6(0xa, 0x3, 0x2)
sync_file_range(r0, 0x0, 0x0, 0x0)

20:29:12 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
socket$inet6(0xa, 0x803, 0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00L'})

20:29:12 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

20:29:12 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x0)

20:29:12 executing program 4:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

20:29:12 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26)
getsockopt$packet_buf(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)=0x7ffffffff000)

20:29:13 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
socket$inet6(0xa, 0x803, 0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00L'})

20:29:13 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="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", 0x534, 0xc001, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14)
sendto$inet6(r3, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@dev}, 0x14)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4)

20:29:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x1f00000000000000, 0x400000000000d4, &(0x7f0000000000)=0x6, 0x4)

20:29:13 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
socket$inet6(0xa, 0x803, 0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00L'})

20:29:13 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x77}}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000040)="9e", 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

20:29:13 executing program 1:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

20:29:13 executing program 4:
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x3c050f546657f3dd)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]})
msgctl$IPC_RMID(r0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88))
msgsnd(r2, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, &(0x7f00000001c0)={0x0, ""/250}, 0x102, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88))
msgsnd(r3, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x12)

20:29:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x80803, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x38b, &(0x7f0000000140)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x1200, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)

20:29:13 executing program 2:
unshare(0x400)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))

20:29:13 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x70, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x3}]}]}]}, 0x70}}, 0x0)

20:29:13 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xfffffffffffffdc5, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000004c0)=""/184, 0xb8}], 0x2}, 0x0)
r0 = socket(0x1e, 0x80802, 0x0)
getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038)
sendmmsg(r0, &(0x7f0000000080), 0x1c0, 0x0)

20:29:13 executing program 2:
set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000001702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d64050000000000c504000020ffffffd6040000e9ffffffb604000010000020620700fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48)

[  595.616804][T16135] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
20:29:13 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getrusage(0x1, &(0x7f0000000100))

[  595.663530][T11736] usb 1-1: new high-speed USB device number 18 using dummy_hcd
20:29:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000004c00020008000500000000000800020000000000080001"], 0x3}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r2, 0x0, r4, 0x0, 0x10005, 0x0)

20:29:13 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x5000, 0x1000, &(0x7f0000017000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d)

20:29:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  595.910460][T11736] usb 1-1: Using ep0 maxpacket: 8
[  595.971431][T16155] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  596.040381][T11736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 119
[  596.050880][T11736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853
[  596.061046][T11736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  596.070248][T11736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.627803][T11736] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  596.842957][    C0] usblp0: nonzero read bulk status received: -71
[  596.849549][    C0] usblp0: nonzero write bulk status received: -71
[  596.858145][T11736] usb 1-1: USB disconnect, device number 18
[  596.866931][T11736] usblp0: removed
[  597.622991][T12166] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  597.863207][T12166] usb 1-1: Using ep0 maxpacket: 8
[  597.983159][T12166] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 119
[  597.993383][T12166] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853
[  598.003655][T12166] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  598.013100][T12166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.316126][T12166] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
20:29:16 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x77}}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000040)="9e", 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

20:29:16 executing program 5:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x400e}, {r1}], 0x2, 0x0, 0x0, 0x0)

20:29:16 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000414900000004fcff", 0x58}], 0x1)

20:29:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:29:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:29:16 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
io_setup(0x1, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x82, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x1})
io_submit(r1, 0x2, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}, 0x0])

[  598.376759][T12166] usb 1-1: USB disconnect, device number 19
[  598.418277][T12166] usblp0: removed
20:29:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:29:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:29:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:29:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x303}, 0x14}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

20:29:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000fed000/0x12000)=nil})

20:29:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e40)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_PRIORITY={0x8, 0x6, 0xfffffffffffffff7}]}, 0x30}}, 0x0)

[  598.703059][T11736] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  598.833927][T12166] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  598.966229][T11736] usb 6-1: Using ep0 maxpacket: 16
[  599.073085][T12166] usb 1-1: Using ep0 maxpacket: 8
[  599.093370][T11736] usb 6-1: config index 0 descriptor too short (expected 58986, got 36)
[  599.101847][T11736] usb 6-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[  599.111119][T11736] usb 6-1: config 161 has 1 interface, different from the descriptor's value: 201
[  599.120463][T11736] usb 6-1: config 161 has no interface number 0
[  599.126893][T11736] usb 6-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[  599.136947][T11736] usb 6-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[  599.147117][T11736] usb 6-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[  599.156276][T11736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.193360][T12166] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 119
[  599.203621][T12166] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853
[  599.213859][T12166] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  599.223141][T12166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.423349][T11736] usb 6-1: GET_CAPABILITIES returned 0
[  599.428952][T11736] usbtmc 6-1:161.8: can't read capabilities
[  599.634113][T11736] usb 6-1: USB disconnect, device number 13
[  599.715933][T12166] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  599.932935][    C0] usblp0: nonzero read bulk status received: -71
[  599.939486][    C0] usblp0: nonzero write bulk status received: -71
[  599.948702][T11736] usb 1-1: USB disconnect, device number 20
[  599.957505][T11736] usblp0: removed
20:29:18 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x77}}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000040)="9e", 0x1)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

[  600.413109][ T3381] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  600.652996][ T3381] usb 6-1: Using ep0 maxpacket: 16
[  600.753221][T11736] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  600.773220][ T3381] usb 6-1: config index 0 descriptor too short (expected 58986, got 36)
[  600.781793][ T3381] usb 6-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[  600.791235][ T3381] usb 6-1: config 161 has 1 interface, different from the descriptor's value: 201
[  600.800971][ T3381] usb 6-1: config 161 has no interface number 0
[  600.807513][ T3381] usb 6-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[  600.817683][ T3381] usb 6-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[  600.827871][ T3381] usb 6-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[  600.837070][ T3381] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.043096][T11736] usb 1-1: Using ep0 maxpacket: 8
[  601.103481][ T3381] usb 6-1: GET_CAPABILITIES returned ffffff80
[  601.103567][ T3381] usbtmc 6-1:161.8: can't read capabilities
[  601.126309][ T3381] usb 6-1: USB disconnect, device number 14
[  601.163293][T11736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 119
[  601.173805][T11736] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853
[  601.184225][T11736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  601.193488][T11736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
20:29:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000fed000/0x12000)=nil})

20:29:19 executing program 5:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x400e}, {r1}], 0x2, 0x0, 0x0, 0x0)

20:29:19 executing program 3:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = inotify_init1(0x0)
fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3)
r2 = gettid()
rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8)
fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2})
inotify_add_watch(r1, &(0x7f0000000800)='./file0\x00', 0xa400295c)
chdir(&(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)

20:29:19 executing program 2:
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
connect(r0, &(0x7f0000000040)=@pppol2tp={0x28, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80)

20:29:19 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x24, 0x0, 0x0, 0x87390900}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e)

20:29:19 executing program 2:
socket$inet6(0xa, 0x40000080806, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
pipe(&(0x7f0000000140))
pipe(&(0x7f0000000040))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x1ff}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

20:29:19 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000320040030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000000030005000000000002000000e00000010010000000000000"], 0x80}}, 0x0)

20:29:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000fed000/0x12000)=nil})

20:29:19 executing program 3:
r0 = socket$unix(0x1, 0x3, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
dup3(r0, r1, 0x0)
r3 = syz_open_dev$swradio(0x0, 0x1, 0x2)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x4000)

[  601.676674][T11736] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
20:29:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000fed000/0x12000)=nil})

[  601.803227][ T3381] usb 6-1: new high-speed USB device number 15 using dummy_hcd
20:29:19 executing program 3:
syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "7660d1", 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff87, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @remote, [@hopopts={0x0, 0x1, [], [@enc_lim={0xc001}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)

[  601.892936][    C0] usblp0: nonzero read bulk status received: -71
[  601.899662][    C0] usblp0: nonzero write bulk status received: -71
[  601.914009][T12166] usb 1-1: USB disconnect, device number 21
[  601.939535][T16209] =====================================================
[  601.946714][T16209] BUG: KMSAN: use-after-free in usb_autopm_put_interface+0xf2/0x120
[  601.954711][T16209] CPU: 0 PID: 16209 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0
[  601.962610][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  601.972710][T16209] Call Trace:
[  601.976047][T16209]  dump_stack+0x191/0x1f0
[  601.980509][T16209]  kmsan_report+0x14a/0x2f0
[  601.985018][T16209]  __msan_warning+0x73/0xf0
[  601.989511][T16209]  usb_autopm_put_interface+0xf2/0x120
[  601.995039][T16209]  usblp_release+0x182/0x3d0
[  601.999739][T16209]  ? usblp_open+0x610/0x610
[  602.004375][T16209]  __fput+0x4c9/0xba0
[  602.008361][T16209]  ____fput+0x37/0x40
[  602.012334][T16209]  ? fput_many+0x2a0/0x2a0
[  602.016759][T16209]  task_work_run+0x22e/0x2a0
[  602.021361][T16209]  prepare_exit_to_usermode+0x39d/0x4d0
[  602.026904][T16209]  syscall_return_slowpath+0x90/0x610
[  602.032295][T16209]  do_syscall_64+0xdc/0x160
[  602.036819][T16209]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  602.042700][T16209] RIP: 0033:0x413741
[  602.046584][T16209] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  602.066192][T16209] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  602.074684][T16209] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413741
[  602.082646][T16209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  602.090605][T16209] RBP: 0000000000000001 R08: ffffffff8baf0a5c R09: 000000006e8b8120
[  602.098686][T16209] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20
[  602.106721][T16209] R13: 0000000000092f71 R14: 0000000000760e38 R15: 000000000075bf2c
[  602.114792][T16209]  ? __se_sys_sendmsg+0x1ec/0x460
[  602.119812][T16209] 
[  602.122123][T16209] Uninit was created at:
[  602.126388][T16209]  kmsan_internal_poison_shadow+0x60/0x110
[  602.132179][T16209]  kmsan_slab_free+0x8d/0x100
[  602.136906][T16209]  kfree+0x4c1/0x2e70
[  602.140886][T16209]  usb_release_interface+0x105/0x120
[  602.146287][T16209]  device_release+0xe2/0x380
[  602.150900][T16209]  kobject_put+0x38d/0x480
[  602.155336][T16209]  put_device+0x51/0x70
[  602.159485][T16209]  usb_disable_device+0x69a/0x1150
[  602.164583][T16209]  usb_disconnect+0x51e/0xd60
[  602.169250][T16209]  hub_event+0x3fd0/0x72f0
[  602.173692][T16209]  process_one_work+0x1572/0x1ef0
[  602.178708][T16209]  worker_thread+0x111b/0x2460
[  602.183457][T16209]  kthread+0x4b5/0x4f0
[  602.187528][T16209]  ret_from_fork+0x35/0x40
[  602.191919][T16209] =====================================================
[  602.198834][T16209] Disabling lock debugging due to kernel taint
[  602.204971][T16209] Kernel panic - not syncing: panic_on_warn set ...
[  602.211546][T16209] CPU: 0 PID: 16209 Comm: syz-executor.0 Tainted: G    B             5.4.0-rc3+ #0
[  602.220803][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  602.230844][T16209] Call Trace:
[  602.234131][T16209]  dump_stack+0x191/0x1f0
[  602.238455][T16209]  panic+0x3c9/0xc1e
[  602.242360][T16209]  kmsan_report+0x2e8/0x2f0
[  602.246858][T16209]  __msan_warning+0x73/0xf0
[  602.251357][T16209]  usb_autopm_put_interface+0xf2/0x120
[  602.256809][T16209]  usblp_release+0x182/0x3d0
[  602.261396][T16209]  ? usblp_open+0x610/0x610
[  602.265888][T16209]  __fput+0x4c9/0xba0
[  602.269871][T16209]  ____fput+0x37/0x40
[  602.273853][T16209]  ? fput_many+0x2a0/0x2a0
[  602.278269][T16209]  task_work_run+0x22e/0x2a0
[  602.282855][T16209]  prepare_exit_to_usermode+0x39d/0x4d0
[  602.288395][T16209]  syscall_return_slowpath+0x90/0x610
[  602.293764][T16209]  do_syscall_64+0xdc/0x160
[  602.298281][T16209]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  602.304260][T16209] RIP: 0033:0x413741
[  602.308148][T16209] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  602.328188][T16209] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  602.336680][T16209] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413741
[  602.344658][T16209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  602.352649][T16209] RBP: 0000000000000001 R08: ffffffff8baf0a5c R09: 000000006e8b8120
[  602.360626][T16209] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075bf20
[  602.368589][T16209] R13: 0000000000092f71 R14: 0000000000760e38 R15: 000000000075bf2c
[  602.376578][T16209]  ? __se_sys_sendmsg+0x1ec/0x460
[  602.383214][T16209] Kernel Offset: disabled
[  602.387564][T16209] Rebooting in 86400 seconds..