00000000003 RCX: 0000000000459a29 [ 339.579942][T12861] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 339.587926][T12861] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 339.595910][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feeaa8136d4 08:29:47 executing program 3: [ 339.604255][T12861] R13: 00000000004c7940 R14: 00000000004dd350 R15: 00000000ffffffff 08:29:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000080)}, 0x20) 08:29:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:47 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 08:29:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="240000002e0007031dfffd940101830020200a000900000006000000000000000d00ff7e280000001100ffffe54db8ba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d9", 0x4c}], 0x1}, 0x0) 08:29:48 executing program 5: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) prctl$PR_GET_ENDIAN(0x13, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x800) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:48 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:48 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 08:29:48 executing program 3: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 340.120245][T12900] debugfs: File '12890' in directory 'proc' already present! [ 340.155418][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 08:29:48 executing program 4: [ 340.258630][T12910] debugfs: File '12908' in directory 'proc' already present! 08:29:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:48 executing program 4: [ 341.030470][T12937] debugfs: File '12908' in directory 'proc' already present! 08:29:49 executing program 5: 08:29:49 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:49 executing program 1: 08:29:49 executing program 4: 08:29:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:49 executing program 4: 08:29:49 executing program 5: 08:29:49 executing program 3: 08:29:49 executing program 1: 08:29:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:49 executing program 5: 08:29:49 executing program 1: 08:29:49 executing program 4: 08:29:49 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:49 executing program 3: 08:29:49 executing program 1: 08:29:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:49 executing program 5: 08:29:49 executing program 4: 08:29:49 executing program 3: 08:29:49 executing program 5: 08:29:49 executing program 1: 08:29:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:50 executing program 4: 08:29:50 executing program 3: 08:29:50 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:50 executing program 1: 08:29:50 executing program 5: 08:29:50 executing program 4: 08:29:50 executing program 3: 08:29:50 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 08:29:50 executing program 4: 08:29:50 executing program 3: 08:29:50 executing program 5: 08:29:50 executing program 1: 08:29:50 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 08:29:50 executing program 5: 08:29:51 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:51 executing program 4: 08:29:51 executing program 3: 08:29:51 executing program 1: 08:29:51 executing program 5: 08:29:51 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 08:29:51 executing program 5: 08:29:51 executing program 1: 08:29:51 executing program 3: 08:29:51 executing program 4: 08:29:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:51 executing program 1: 08:29:51 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:51 executing program 5: 08:29:51 executing program 4: 08:29:51 executing program 1: 08:29:51 executing program 3: 08:29:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:51 executing program 3: 08:29:51 executing program 4: 08:29:51 executing program 5: 08:29:51 executing program 1: 08:29:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:52 executing program 5: 08:29:52 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000004c0)="11dca50d5e0bcfe47bf070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) 08:29:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x7}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x60}}, 0x0) 08:29:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 08:29:52 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @empty}}}, 0x90) 08:29:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo:\x00\x00\x06\x00'}) [ 344.241044][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 344.258880][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:29:52 executing program 4: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_UNLOCK(0x0, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x400020000000010, 0x803, 0x0) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xb) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) 08:29:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) accept$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x25d) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) r3 = socket$inet6(0xa, 0x6, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="0402d9", 0x3) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 08:29:52 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 344.507717][T13112] debugfs: File '13110' in directory 'proc' already present! 08:29:52 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0044dff, 0x70e000) 08:29:52 executing program 1: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x105, 0x1b, r2, 0x0) 08:29:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x0, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:53 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:53 executing program 3: r0 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000940)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x4d) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="1400000027000500d25a80648c63940d0224fc00", 0x14}], 0x1}, 0x0) [ 345.269114][T13164] debugfs: File '13110' in directory 'proc' already present! [ 345.287310][T13164] debugfs: File '13110' in directory 'proc' already present! 08:29:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0044dff, 0x70e000) 08:29:53 executing program 1: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) syz_open_dev$binder(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x81002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x121000, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x0, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) accept$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x25d) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r2) r3 = socket$inet6(0xa, 0x6, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100), 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="0402d9", 0x3) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 08:29:53 executing program 3: unshare(0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x1b, 0xffffffffffffffff, 0x0) 08:29:53 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 345.515796][T13179] debugfs: File '13171' in directory 'proc' already present! 08:29:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x0, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:53 executing program 4: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in=@local}}, {{@in6=@loopback}}}, &(0x7f0000000080)=0xe8) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6242, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="1223a50d3c13ca4dcd76d1e59ef4e12ff3b866000044c7e4f4611453d70b04f76c75250c6fb761c4b176d09abc157c392c3eaf7081f7927acbfe216233c663ef7ae754a5ec40ac69bb91e7fa06a9948d7c92db2160ffad0f1bdc52d83cecd28ae8027f5ac3668c444b298a668dec6181a978627cedf71907cec99c3d2c1c1a5afc0f1e910c345bac74e5e992a6f9eea7a343de46fa572d20a1ae5148e57c083254e0233b152cc8174cdb"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x0, &(0x7f00000001c0)) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x7}, 0x7) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000100000001, &(0x7f00000001c0)) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x40000100000001, &(0x7f00000001c0)=0x0) io_submit(r3, 0x0, 0x0) r4 = creat(0x0, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000100)={0x7}, 0x7) socket$unix(0x1, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000500)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x1800000000000060, 0x9, 0x0, &(0x7f0000000000)="b90703e6680d698cb8", 0x0, 0x100}, 0x40) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/245, 0xf5) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ashmem\x00', 0x2001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x8, 0x0, &(0x7f0000000000)="b90703e6680d698c", 0x0, 0x100}, 0x40) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000400)=""/245, 0xf5) lseek(r6, 0xfffffffffffffffc, 0x1) getdents(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x22, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) io_submit(0x0, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 08:29:53 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000002) 08:29:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:54 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000002) 08:29:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 346.297087][T13220] debugfs: File '13171' in directory 'proc' already present! 08:29:54 executing program 1: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x660c) 08:29:54 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000002) 08:29:54 executing program 3: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x9}, 0x20) 08:29:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet_int(r2, 0x0, 0x21, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x2b) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 08:29:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x2c}}, 0x0) 08:29:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) read$alg(r3, &(0x7f0000000240)=""/209, 0xd1) 08:29:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:55 executing program 5: r0 = inotify_init1(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x10001) 08:29:55 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000080)) write$P9_RRENAME(r0, &(0x7f0000000380)={0x7}, 0x7) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000280)="2e00000022004786006d20002b1f003500b00000000000000000000d4ab4268dd93f748d2d671af9336056ac3dbd", 0x128) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 08:29:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r2, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x5f690a9e90641ec9, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000a40), 0x14) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r4 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x5f690a9e90641ec9, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000a40)={0x101, 0x0, 0x800}, 0x14) 08:29:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mlockall(0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 08:29:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x17, 0x0, 0x0, 0x0, 0x4}, 0x3c) 08:29:55 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "f9aa99a55ef2ed46f6fcfc457f008c322a827db9a7fef5963f39e1d03ad845bc9aaf8580e5f16a439cbde5553be5954f6af0c3f435b13dc1b44dbf59f073c3e0ca9589f632ff9e21470b9432486dbf7c517289d1d0b4a3e228c4b03a01ed82e3d855b1453acd93ce886e9b3096b77897a1f62df746936a1255fdfe43fb7bd6cf6c6fbe5b2f2ca3b0eb6db1443914f6f386ca02af520cad38564350dd15e88d4f50303895c22bbdd45073a16032bbdaddc4f35591ed1917cee97a5744940c56687b69a449dcceebaaa958454622d90840da53914e7c01fe5b8f674608f12f8cc41aa779d33804b9a47ac7d9a17af2a7f26c1519598e2a6c19171ec40c0a0f8be4"}, r1}}, 0x128) 08:29:55 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0xc80f01717c80406d, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) 08:29:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x3}}, {{&(0x7f0000000080)=@hci, 0x279, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x2}}], 0x400000000000348, 0x0) 08:29:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x6) sched_setattr(0x0, 0x0, 0x0) open(0x0, 0x86842, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) 08:29:55 executing program 4: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) syz_open_dev$binder(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) prctl$PR_GET_ENDIAN(0x13, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x81002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:55 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:55 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 347.867828][T13329] debugfs: File '13323' in directory 'proc' already present! 08:29:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:56 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r0 = getpid() getpriority(0xfffffffffffffffe, r0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x10901, 0x0) r1 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x1) unshare(0x600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x27}, 0x44a3}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x10}, 0x4}], 0x48) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev\b\x00\x13\x00\x00\x00\x00\x00t\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) rt_sigqueueinfo(r3, 0x30, &(0x7f0000000140)={0xb, 0x800}) getuid() tgkill(0xffffffffffffffff, 0x0, 0xd) dup(0xffffffffffffffff) 08:29:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10000000004) write(r0, &(0x7f0000000080)="2700000014000707030e000002000a0010600100f5fe3936bb760c23001259f32dc57410e8a99f", 0x27) [ 348.079597][T13345] ptrace attach of "/root/syz-executor.3"[11957] was attempted by ""[13345] 08:29:56 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:56 executing program 3: 08:29:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:56 executing program 3: 08:29:56 executing program 1: 08:29:56 executing program 4: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) syz_open_dev$binder(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) prctl$PR_GET_ENDIAN(0x13, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x81002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:29:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:56 executing program 3: 08:29:56 executing program 1: unshare(0x400) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x105, 0x1b, 0xffffffffffffffff, 0x0) [ 349.010734][T13391] debugfs: File '13384' in directory 'proc' already present! 08:29:57 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) [ 349.191278][T13400] IPVS: ftp: loaded support on port[0] = 21 08:29:57 executing program 5: 08:29:57 executing program 1: 08:29:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:57 executing program 3: 08:29:57 executing program 5: 08:29:57 executing program 1: 08:29:57 executing program 4: 08:29:57 executing program 3: 08:29:57 executing program 5: 08:29:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:57 executing program 1: 08:29:58 executing program 5: 08:29:58 executing program 3: 08:29:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:58 executing program 4: 08:29:58 executing program 1: 08:29:58 executing program 5: 08:29:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:58 executing program 3: 08:29:58 executing program 4: 08:29:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:58 executing program 5: 08:29:58 executing program 1: 08:29:58 executing program 4: 08:29:58 executing program 3: 08:29:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:58 executing program 4: 08:29:58 executing program 3: 08:29:58 executing program 5: 08:29:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:58 executing program 1: 08:29:59 executing program 5: 08:29:59 executing program 3: 08:29:59 executing program 4: 08:29:59 executing program 1: 08:29:59 executing program 5: 08:29:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:59 executing program 3: 08:29:59 executing program 1: 08:29:59 executing program 4: 08:29:59 executing program 5: 08:29:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:59 executing program 4: 08:29:59 executing program 1: 08:29:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:59 executing program 3: 08:29:59 executing program 5: 08:29:59 executing program 4: 08:29:59 executing program 1: 08:29:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:29:59 executing program 5: 08:29:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:29:59 executing program 3: 08:30:00 executing program 1: 08:30:00 executing program 4: 08:30:00 executing program 1: 08:30:00 executing program 5: 08:30:00 executing program 3: 08:30:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:00 executing program 4: 08:30:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:00 executing program 5: 08:30:00 executing program 1: 08:30:00 executing program 3: 08:30:00 executing program 5: 08:30:00 executing program 4: 08:30:00 executing program 1: 08:30:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:00 executing program 4: 08:30:00 executing program 3: 08:30:00 executing program 5: 08:30:00 executing program 1: 08:30:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(r0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x400, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r2, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x5f690a9e90641ec9, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000a40), 0x14) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) 08:30:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) read$alg(r3, 0x0, 0x0) 08:30:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x9, 0x8, 0x6, 0x400, 0x0, 0x1}, 0x3c) 08:30:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r1, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000a40), 0x14) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x5f690a9e90641ec9, 0x0) 08:30:01 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x222a6d8102856fd9) socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:01 executing program 3: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x222a6d8102856fd9) socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:30:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:01 executing program 4: r0 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, r1, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="9af8f54b8b666530fe1df0c100887eb6"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x92b9ca4407d56a07}, 0x24004048) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) sched_getaffinity(r2, 0x8, &(0x7f0000000280)) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x1cec2) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000300)=0x8000) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)={'syz0', "2b6ea01d123fc9fa6b2c3d8a00b760740193c7c2ce979aa9b06a74250b23411b468ad060f9632cf83e7aa0fa09496c74f591ea1bcf0071cf7fac144f89f9e627f5f19f0df5808827995afdbb08d2a7ff9845fa9fd56455629f40844965164047bcaa26e50354f5d0d319f7ff68e5fb552b2427b09dd8542f1962cd63729934ed99d4cc0942b84174b487127f4de214c7e617cdc8f9795ff9f95b3d5bebf0a73f09"}, 0xa5) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000440)=0x1, 0x12) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x8000, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x47, "d59a4a7eb2489597d2c734b29aab46ea6f160984519d42da15f2be5fca7dfd137c012b51827ff7d5525500fe1a38cdeb337a878d44b299fde97fef6c0df245aea1a09e608f8422"}, &(0x7f0000000580)=0x4f) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000005c0)={r7, 0x1, 0x30}, 0xc) r8 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0xffffffff, 0x2000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x3}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000006c0)={r9, @in6={{0xa, 0x4e22, 0x9, @remote}}, 0x101, 0x1ff, 0x0, 0x7fff, 0x44}, 0x98) waitid(0x0, r2, 0x0, 0x4, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000780)={"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"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000b80)={0x0, 0x100, 0x1}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000c00)={r10, 0x7f}, 0x8) pipe(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETMODE(r11, 0x5601, &(0x7f0000000c80)) pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r13, 0x40206417, &(0x7f0000000d00)={0xff, 0x9, 0x8, 0x1, 0xd, 0x3}) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r12, 0x0, 0x48f, &(0x7f0000000d40)={0x62, @multicast1, 0x4e24, 0x2, 'lblc\x00', 0x8, 0x97, 0x64}, 0x2c) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(r14, 0x9208, 0x7fffffff) 08:30:01 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0xfeca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x222a6d8102856fd9) socket$inet6(0xa, 0x1000000000002, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r1, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000a40), 0x14) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x5f690a9e90641ec9, 0x0) 08:30:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:01 executing program 3 (fault-call:1 fault-nth:0): r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:01 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 353.823583][T13642] FAULT_INJECTION: forcing a failure. [ 353.823583][T13642] name failslab, interval 1, probability 0, space 0, times 1 [ 353.836822][T13642] CPU: 1 PID: 13642 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 353.844763][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.869040][T13642] Call Trace: [ 353.872412][T13642] dump_stack+0x191/0x1f0 [ 353.876808][T13642] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 353.882834][T13642] should_fail+0xa3f/0xa50 [ 353.887334][T13642] __should_failslab+0x264/0x280 [ 353.892414][T13642] should_failslab+0x29/0x70 [ 353.897150][T13642] __kmalloc_track_caller+0x1ad/0xea0 [ 353.902605][T13642] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 353.908806][T13642] ? __do_sys_bpf+0x7fd8/0x12ea0 [ 353.913827][T13642] ? __fget_light+0x6b1/0x710 [ 353.918640][T13642] memdup_user+0x79/0x190 [ 353.923040][T13642] __do_sys_bpf+0x7fd8/0x12ea0 [ 353.927903][T13642] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 353.933879][T13642] ? kmsan_internal_set_origin+0x6a/0xb0 [ 353.939604][T13642] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 353.945577][T13642] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 353.951722][T13642] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 353.957516][T13642] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 353.963494][T13642] __se_sys_bpf+0x8e/0xa0 [ 353.967904][T13642] __x64_sys_bpf+0x4a/0x70 [ 353.972401][T13642] do_syscall_64+0xbc/0xf0 [ 353.977411][T13642] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 353.983325][T13642] RIP: 0033:0x459a29 [ 353.987267][T13642] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.006907][T13642] RSP: 002b:00007f8873ac9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.015468][T13642] RAX: ffffffffffffffda RBX: 00007f8873ac9c90 RCX: 0000000000459a29 08:30:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x8040, 0x0) r5 = accept4$tipc(r4, &(0x7f0000000400), &(0x7f0000000300)=0xfffffffffffffd33, 0x40800) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) fchdir(r1) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffe53, &(0x7f0000000140)={0x0}}, 0x20044090) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) set_thread_area(&(0x7f0000000000)={0x2, 0x1000, 0x400, 0x1, 0x0, 0x1, 0x1, 0x1}) r10 = socket(0x11, 0x1, 0xdc) recvfrom$packet(r10, &(0x7f0000000280)=""/128, 0x80, 0x100, 0x0, 0x0) r11 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$HIDIOCSREPORT(r11, 0x400c4808, &(0x7f0000000100)={0x2, 0x200, 0x30}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="060020001000050700000000000000001f543ba7e8e9326266f1f7ee38b52827a1cbf79b5ace14676a7b0bd83b7acaa28450ad393a7c30b83e94a8cead18b729539b89095ac00c2979ce2d1e66c9c259fb44f369a3c0163b01f72ae17d76cba467950fbcaa2d78cbadcb6a3562f0711848a6a6250d71a2a881902b68cb7f5781e1cfc2e20af505724ce6f600fe8eeb9373e3060ff9ae7842f07bfc36120bae0b689ff974511731aae67c61bbf51114726126d49eee98bcdb052c9ce5b37d9320db6e3bf28e7ce52055ebf0c08c3302df92553e93483a3a86642f8995f67b4c587ef9bd2d9c9c6cf6", @ANYRES32=0x0, @ANYBLOB="030000000000000020001200080001007369740014000200080003003100000008000200", @ANYRES32=0x0], 0x40}}, 0x0) [ 354.023464][T13642] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 354.031451][T13642] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 354.039447][T13642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8873aca6d4 [ 354.047438][T13642] R13: 00000000004bfe2b R14: 00000000004d1c38 R15: 0000000000000004 08:30:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:02 executing program 5: write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x7, 0x2}, 0x9) r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)) 08:30:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x4098c0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) fsopen(&(0x7f0000000000)='ncpfs\x00', 0x1) [ 354.166870][T13628] syz-executor.5 (13628) used greatest stack depth: 51328 bytes left 08:30:02 executing program 3 (fault-call:1 fault-nth:1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 354.440782][T13669] FAULT_INJECTION: forcing a failure. [ 354.440782][T13669] name failslab, interval 1, probability 0, space 0, times 0 [ 354.453710][T13669] CPU: 0 PID: 13669 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 354.461656][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.471762][T13669] Call Trace: [ 354.475140][T13669] dump_stack+0x191/0x1f0 [ 354.479549][T13669] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 354.487518][T13669] should_fail+0xa3f/0xa50 [ 354.492019][T13669] __should_failslab+0x264/0x280 [ 354.497081][T13669] should_failslab+0x29/0x70 [ 354.501693][T13669] __kmalloc+0xae/0x430 [ 354.505888][T13669] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 354.511804][T13669] ? __do_sys_bpf+0xa29a/0x12ea0 [ 354.516762][T13669] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 354.522852][T13669] __do_sys_bpf+0xa29a/0x12ea0 [ 354.527672][T13669] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 354.533593][T13669] ? kmsan_internal_set_origin+0x6a/0xb0 [ 354.539263][T13669] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 354.545179][T13669] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 354.551263][T13669] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 354.557002][T13669] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 354.562919][T13669] __se_sys_bpf+0x8e/0xa0 [ 354.567276][T13669] __x64_sys_bpf+0x4a/0x70 [ 354.571716][T13669] do_syscall_64+0xbc/0xf0 [ 354.576161][T13669] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 354.582069][T13669] RIP: 0033:0x459a29 [ 354.585989][T13669] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.605609][T13669] RSP: 002b:00007f8873ac9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.614043][T13669] RAX: ffffffffffffffda RBX: 00007f8873ac9c90 RCX: 0000000000459a29 [ 354.622026][T13669] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000002 [ 354.630021][T13669] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:30:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) io_submit(0x0, 0x2000000000000043, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xe191, 0xffffffffffffffff, 0x0}]) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/202) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getpeername$inet(r2, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f0000000500)=0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000002c0)={0x80, 0x1}, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x82640, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='r\x00', 0x4145c0, 0x0) write$P9_RCREATE(r4, &(0x7f0000000280)={0x18, 0x73, 0x2, {{0x40, 0x0, 0x2}}}, 0x18) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x5, 0x7, 0xfe, 0x8000}, {0x70a, 0x6, 0x6, 0x4}, {0x5a, 0x22, 0x9, 0x2}, {0x4, 0x6, 0xbd, 0x9}, {0x8, 0x2, 0x0, 0x800}]}) [ 354.638018][T13669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8873aca6d4 [ 354.646008][T13669] R13: 00000000004bfe2b R14: 00000000004d1c38 R15: 0000000000000004 08:30:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:02 executing program 3 (fault-call:1 fault-nth:2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) shutdown(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 08:30:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:03 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x21012, r0, 0x1) r1 = socket(0x15, 0x80005, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0x0, 0x8, {0x4}}, 0x18) getsockopt(r1, 0x114, 0x0, 0x0, &(0x7f000033bffc)=0x30d) 08:30:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) ptrace$pokeuser(0x6, r4, 0xe398, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:03 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20a600, 0x0) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$bt_hci(r4, 0x0, 0x6794dd4c83e4b8fa, &(0x7f0000000280)=""/118, &(0x7f0000000300)=0x76) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x28) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={r5, 0x5}, &(0x7f0000000240)=0x8) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)) dup3(r1, r6, 0x0) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000080)=""/187) 08:30:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4008, 0x0, 0x0, 0x0, 0x3ff00}, 0x0, 0xc, 0xffffffffffffffff, 0x11) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r4) keyctl$get_persistent(0x16, r3, r4) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r7, 0x29, 0x0, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) 08:30:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) ioctl$sock_ifreq(r1, 0x891d, &(0x7f0000000040)={'eql\x00`\x05\xa9[,\x04\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x5}) 08:30:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB="0000cc9100000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f00000000c0)) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x3, 0x20, 0x0, r2, 0x80000001, [], r10, 0xffffffffffffffff, 0x0, 0x4}, 0xffffffffffffffa2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r11, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:03 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x6, 0xe, 0x7fff, 0x5, "419b77eac225d09304559899714eb0f8270d8344a67baf0495567460b5fb47dd"}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) dup(r4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000140)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:03 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {0xfffc}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) write$hidraw(r0, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 08:30:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1, 0x202}, 0x3c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "f12b99a6b57c94788b5bf867ad474903"}, 0x11, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000001c0), &(0x7f0000000340)="e6dbef7b"}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmsg(r3, &(0x7f00000002c0)={&(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="4340fb89c4742df27c56c17d579a811e17693917874b7b501b2a223c4e03d551e6b0f118f178d18f99b194fc55d36eef509686234ebc41d5ddcb", 0x3a}, {&(0x7f0000000180)="15f674a8aea4ec4909acf8f85e9a0343d4a77f20a0f7be6c7555cdf3f5b91882f0bf6aea69d322362a802cb8e185c0a1391e9ae3036382259246cc0b0ea32c304d192dc0c24b910e7b977a835a2ebc1076518a1e199630ecc7264117a05058d9d2ea2842f8a8991300f3548627787f121fdf29f3893130788edabd9a682d32044e022daa68926ef85538a40b9dc5346135ab6dae4f0cb2bf5ebf75f9c60d597d614cd981ea3ec95cd16ec3942091c1bd0795342e35300a36b3a259294db2e17e1d0ee0981d524f58de6d2ccc1286f5c3", 0xd0}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1148}, 0x4) 08:30:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 356.222992][T11786] usb 2-1: new high-speed USB device number 11 using dummy_hcd 08:30:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_destroy(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) connect$unix(r2, &(0x7f0000000000)=@abs={0x2, 0x0, 0x4e20}, 0x6e) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) 08:30:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:30:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r1 = accept(r0, &(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000b80)=0x80) flock(r1, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x20000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000080)={0x5, 0x5, 0x8}) write$binfmt_aout(r2, &(0x7f00000000c0)={{0x20e, 0x61, 0x4, 0x215, 0xf2, 0x9, 0xd, 0x7}, "c735cf745fba9a87009f6282a7", [[], [], [], [], [], [], [], [], [], []]}, 0xa2d) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 356.462961][T11786] usb 2-1: Using ep0 maxpacket: 8 [ 356.582601][T11786] usb 2-1: config index 0 descriptor too short (expected 252, got 36) [ 356.591026][T11786] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 356.599374][T11786] usb 2-1: config 0 has no interface number 0 [ 356.599463][T11786] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 356.617149][T11786] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 356.617222][T11786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:30:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x80c, r1) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = dup3(r3, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x21, 0xe2, 0x1, 0x8000, 0x580, r2, 0x80000001, [], 0x0, r4, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)="338435cabaaf5a49667b92fdc3efce899b9f38da6529aba24b2fa6df3a24159e6adc3db8cb3098da073ac6d1c3d89c469dc5fa46e2e1a4554e5370b0", &(0x7f0000000080)}, 0x27a) [ 356.775566][T11786] usb 2-1: config 0 descriptor?? [ 357.023385][ T3353] usb 2-1: USB disconnect, device number 11 [ 357.802250][T13799] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 358.042169][T13799] usb 2-1: Using ep0 maxpacket: 8 [ 358.162328][T13799] usb 2-1: config index 0 descriptor too short (expected 252, got 36) [ 358.170660][T13799] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 358.179964][T13799] usb 2-1: config 0 has no interface number 0 [ 358.186266][T13799] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 358.197455][T13799] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 358.206656][T13799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.215885][T13799] usb 2-1: config 0 descriptor?? [ 358.455565][ T3353] usb 2-1: USB disconnect, device number 12 08:30:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) 08:30:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00ffff100001050000c9a50000000000000000d9bda8975d3a39bb2baff0b590cdd50800000000000000cb279469c5f82bc6b9d235fdca105f8166eecca50f64e770cd2d702ece36850ba44b8785864ec16019f508bf2fd5d0c95d8a57606fb9b31310c50ae42409946546d775329a9d120c2ff0fc2e6e94aa62d48646ac2d2515c9073cd5f1d9d78e0f86a98060f4d9685202d360d445f7fa6b952e260f87169a7469c2c103b23f926e4a298dfc33c9f9a605d8278737776cfeaf13ce6ac442ad75c2a5", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008000900240e0000"], 0x3c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x8, 0x3, 0x2000ea, 0x101, 0x1}, 0x14) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) 08:30:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x0, 0xc6c9, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47b") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xfffffffc) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47b") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x7}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:30:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000250007041dfffd946f610500020000001f00000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x9) 08:30:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x54, &(0x7f0000000080)="0be31c64b423e3372f369d93c5752bf4c955d60a75574eec9cf0b9f9a150df5109a7a6c5af55358ef39f87ec60e97ad40cb18332ce138a2142a17abda4fe6eedab514d98f778bedb38eed81675ac83a2fa9cc481", 0xa1, 0x0, &(0x7f0000000100)="747996a25b4297899b1eb11a9d9d7749ecc367156668bb68dd611d93520655ff997624c702fbf4c4656315b43216f833412e7865f4bba9c7657f025dc7ccdf7e318f31b7ab7665c718de4e3a82e3edab17fc0aad0c70f866d51447fcf949248e406ea393a4226c06f91e888032c1e1c1802ab9e88b86c18b39dfdecf40dbe31f65f2adb85a78d54dfe06fc8d848dac31c4cd4c04354134d5b8fc27da346bdd0eef"}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3f, 0x6000) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) 08:30:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47b") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 359.347491][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 08:30:07 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/null\x00', 0x10100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000005100)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20081}, 0xc, &(0x7f00000050c0)={&(0x7f0000005140)=ANY=[@ANYBLOB="58260000080a00032dbd7000ffdbdf25050000021670c9e63001dbbf663684025f1f68eba0a2d79478c3d991adad51d9d1f3c1c359fc9e7fe74fdff0d498be4830151157bcf4256fda08f50dcb79ed7612e6c3f9bd2b9c2d8a25df879c7744cdf2a0174813a3abe52c78ebb24592d33145e308340b5b14b3dc53a719d66fd3d7d63c09744550298d8e857c77daffcb046c9f628ba30595cbb51c54dcc241f65105903671578fc785720763aabab788be97156f7adc690a7847016595ac81e60da17b352dcc9c077734801c013ac46224b5d11844732a4613c757cd15ae177b15099a4b21d768d8aac180008000750c68990189477774d2113ef9095a1bbeadc2e9fdd89667db59a880981766a20c4d0c7ed221d543e0492f3c399393f52f57c5e000ddde3a515621725d5a8b0795c0fa0eba42afa35e94884e59bc12bc7daf82d3ba1ce56f5e1a1aa648b1d5727b9cc6f4f1c776f04bdcc654a99363654fb9a3b15c3b4ac5b661d10030126c00040012000800540099812722f310e82e6a7672d5fd0762a03728d51b8cb87c67721555767345e95f7cfb6892f2170f292c90a0ba9fc0b87051a5cc9afa643dbdccd88f7d032275030aceda47d0ba762837ec4c24b463802aff18f8244702a84aa99947ce657ce299086e64842971e4537aeee6a2e595e5fa290e7b43779668dd8397e549c9a3f9af2ac249effd19eb2c7a779a1fbd018179c14360506c017afbd50ba8f4f9bd3371887c7fdbc241ff8b24db8292f25a28897095c3ad6126a8", @ANYRES32=r4, @ANYBLOB="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"], 0x270f}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) r5 = socket$inet6(0xa, 0x6, 0x8) dup3(r5, r1, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0xffffffdb) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4) [ 359.448122][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 08:30:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:07 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf0") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:07 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x410040, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) r3 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r4, 0x0, 0x0) fchownat(r0, &(0x7f00000000c0)='./file0\x00', r2, r4, 0x400) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x80000042801, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYBLOB="d90000003858f72b1d2abaac6829cd63d3eb379c4f943e85077a6f7d5ef43ee59322aa2e57c23043c9f328ea7431f5cf1f7eb936545e97ad9b992d30e453eaf4650790beea3f43138d4c52a132a95ba6e75991d62e6606a6579761e99779fffb0054dd6c01e49676b91909260c2f15ad832218cb156f372b6e81c6293936f7a2c6d4588239a987856d4752afc8aa7d866b97ef39a9b623015e2bbd0f3929546ba6b4b06d34a2ee2524ee39215b0a67f92d87bff93a77c9c1eaaa01917cf05673498b918e150811f434de5240eca07d0534e72df6a32eaa3fd925f795f79560e8a42bacb19e7c9eba08e94c20f27d2a9146125b755e55561f65f52e9badce1525a4f5bc4636eb35607a6c7e022df527567800102215b6985d37319ba4cb4eca8d6eade7687b708ba50e332124d11de339d68bccea0a8d8c46dfb9b103514fbf9bd83b7d2135596b44598b9dbb6bdcde989e1be7f5f3b207e02416f2f87a774be854fa6176edde6e682a57e42eff0afbb3ac760100008002f18981eb1148aca6c3e68ac7e1e60e432b8727fc3ee3b0f002faff357b6190780f0170ef5fa71540dc283aef6a692c8f"]) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000000)=0xfffffffffffffffd) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18}, 0x18) 08:30:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf0") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x8}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180)="4384ee67ca51c19128701e388b67f057a3301dfcc88f7a9bbf48e829d2308d7c5a2fbc03fbe9b1a7b2e1dc6c5c1e3e4b26476a9b3d0d61a838c067c427e8ba8c3df990886df9abbbe68c341f858255569e4e1c6841bb505644ca8be69dcc96826261d37b7200752495d24cb9bfa249b2b36579cb0543bef84fbcd287445443a80869e87a45e253cb6711b158314fe443c6aa574a277839ae27b6681be592d87256c988ba4948ff5c0ee079bb7e7650f115d4000000000000", &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x140042) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x5, 0x80, 0x2}, 0x10) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x4) socket$inet(0x2, 0x80000, 0x40) [ 359.932623][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.939006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 359.945485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 359.951690][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:30:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 360.412783][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 360.419101][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:30:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf0") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000200)) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r3, 0x0, 0x0) r4 = getpgid(r3) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000200)) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r5, 0x0, 0x0) kcmp(r4, r5, 0x1, 0xffffffffffffffff, r0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xdcd48c39aaaea8f2, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffddf) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r8}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r9, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000380)) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x7ba93e03f90e05c1) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) r3 = semget(0x0, 0x1, 0x1) r4 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) r6 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x8) setresgid(r7, 0x0, 0x0) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000240)={{0x101, 0xffffffffffffffff, r4, r5, r7, 0x10, 0x1}, 0x4, 0x5, 0x2}) dup3(r1, r2, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/187) 08:30:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1e) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 08:30:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 08:30:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:08 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0xe) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x1ff) dup2(r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x6, &(0x7f0000000000)="000d12aaecfb7efd1ee522") 08:30:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 08:30:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) pkey_alloc(0x0, 0x0) 08:30:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc3a, 0x10000) execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000180)='/dev/input/event#\x00', &(0x7f00000001c0)='/dev/input/event#\x00', &(0x7f0000000200)='-\x00', &(0x7f0000000240)='ppp1@posix_acl_access\x00', &(0x7f0000000280)='lo\x00', &(0x7f00000002c0)='/dev/input/event#\x00', &(0x7f0000000300)='/dev/input/event#\x00'], &(0x7f0000000580)=[&(0x7f0000000380)='/dev/input/event#\x00', &(0x7f00000003c0)='/dev/input/event#\x00', &(0x7f0000000400)='/dev/input/event#\x00', &(0x7f0000000440)='*eth0\x99}!self\x00', &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='/dev/input/event#\x00', &(0x7f0000000500)='/dev/input/event#\x00', &(0x7f0000000540)='/dev/input/event#\x00'], 0x1c00) 08:30:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:10 executing program 1: mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x23f4934f79251bdb, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x154e, 0x3, 0x8000, 0x3, 0x4, 0x80000000, 0x1, 0xffffffff, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={r3, @in6={{0xa, 0x4e22, 0x7ff, @mcast2, 0x1}}, 0x63ae, 0x800, 0x9, 0x1f, 0x4c}, 0x98) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x8000, 0x4) setresuid(0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e0000002000000a10578cd3f98298902520002000000ac1414aaac1414aa"], 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) socket(0x10, 0x2, 0x0) r4 = userfaultfd(0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = memfd_create(&(0x7f0000000040)='/eth1bdev\x00', 0x0) r7 = dup2(r6, r5) dup3(r7, r4, 0x0) 08:30:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x4b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50"}, 0x51) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESDEC]]], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 08:30:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 08:30:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() r3 = getgid() syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000001c0)=[0xee01, r1, r2, r3, r4]) 08:30:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 08:30:10 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4b4b4b52416e8c9, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x1d99, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x8, 0x1}, 0x3c) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:10 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7b, 0xd9, 0x68, 0x20, 0xc45, 0x628c, 0xec1e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x0, 0x0, 0xf7, 0x19, 0x8}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002340)=ANY=[@ANYBLOB="12010000b954c910c4107a80300b0004040109021200010000000009046f00005a80f100"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x0, 0x0, 0x2, "d247"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 08:30:10 executing program 4: time(&(0x7f0000000240)) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x8400) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc3a, 0x10000) execveat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000180)='/dev/input/event#\x00', &(0x7f00000001c0)='/dev/input/event#\x00', &(0x7f0000000200)='-\x00', &(0x7f0000000240)='ppp1@posix_acl_access\x00', &(0x7f0000000280)='lo\x00', &(0x7f00000002c0)='/dev/input/event#\x00', &(0x7f0000000300)='/dev/input/event#\x00'], &(0x7f0000000580)=[&(0x7f0000000380)='/dev/input/event#\x00', &(0x7f00000003c0)='/dev/input/event#\x00', &(0x7f0000000400)='/dev/input/event#\x00', &(0x7f0000000440)='*eth0\x99}!self\x00', &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='/dev/input/event#\x00', &(0x7f0000000500)='/dev/input/event#\x00', &(0x7f0000000540)='/dev/input/event#\x00'], 0x1c00) 08:30:11 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 08:30:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(0x0, 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 08:30:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) 08:30:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(0x0, 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 363.172552][T11746] usb 2-1: new high-speed USB device number 13 using dummy_hcd 08:30:11 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b685540141508201ea90000000109021200010000000009040200004bfc45007119db661524996190535ff875f63f39da536638e75482182587c6bd047164f1d02ac9d71d3592f4a4f4ed695d8acb01c3984e3b6e03e7fc9a7781f1bb01721d74cd8a29aae8ae12d2b4b255cf8e8572e21b5eaa1f7714b3"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0xffff) 08:30:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100000000, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) [ 363.422262][T11746] usb 2-1: Using ep0 maxpacket: 32 [ 363.562658][T11746] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 363.570955][T11746] usb 2-1: config 0 has no interface number 0 [ 363.577267][T11746] usb 2-1: New USB device found, idVendor=0c45, idProduct=628c, bcdDevice=ec.1e [ 363.589207][T11746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.601149][T11746] usb 2-1: config 0 descriptor?? [ 363.650948][T11746] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628c [ 363.662639][T13799] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 363.862221][T11746] gspca_sn9c20x: Write register 1000 failed -71 [ 363.868518][T11746] gspca_sn9c20x: Device initialization failed [ 363.875046][T11746] gspca_sn9c20x: probe of 2-1:0.176 failed with error -71 [ 363.885536][T11746] usb 2-1: USB disconnect, device number 13 [ 364.032300][T13799] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 364.040578][T13799] usb 6-1: config 0 has no interface number 0 [ 364.047199][T13799] usb 6-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice=a9.1e [ 364.056415][T13799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.069244][T13799] usb 6-1: config 0 descriptor?? [ 364.115674][T13799] ftdi_sio 6-1:0.2: FTDI USB Serial Device converter detected [ 364.124527][T13799] usb 6-1: Detected FT-X [ 364.322813][T13799] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 364.343567][T13799] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 364.363887][T13799] ftdi_sio 6-1:0.2: GPIO initialisation failed: -71 [ 364.371765][T13799] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 364.384681][T13799] usb 6-1: USB disconnect, device number 2 [ 364.393931][T13799] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.404467][T13799] ftdi_sio 6-1:0.2: device disconnected [ 364.622223][T11746] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 364.862314][T11746] usb 2-1: Using ep0 maxpacket: 32 [ 364.982302][T11746] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 364.990782][T11746] usb 2-1: config 0 has no interface number 0 [ 364.997139][T11746] usb 2-1: New USB device found, idVendor=0c45, idProduct=628c, bcdDevice=ec.1e [ 365.006305][T11746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.015751][T11746] usb 2-1: config 0 descriptor?? [ 365.056451][T11746] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628c [ 365.112409][ T3353] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 365.263259][T11746] gspca_sn9c20x: Write register 1000 failed -71 [ 365.269643][T11746] gspca_sn9c20x: Device initialization failed [ 365.275991][T11746] gspca_sn9c20x: probe of 2-1:0.176 failed with error -71 [ 365.285652][T11746] usb 2-1: USB disconnect, device number 14 [ 365.472339][ T3353] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 365.480515][ T3353] usb 6-1: config 0 has no interface number 0 [ 365.486932][ T3353] usb 6-1: New USB device found, idVendor=1514, idProduct=2008, bcdDevice=a9.1e [ 365.496100][ T3353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.505871][ T3353] usb 6-1: config 0 descriptor?? [ 365.545197][ T3353] ftdi_sio 6-1:0.2: FTDI USB Serial Device converter detected [ 365.553980][ T3353] usb 6-1: Detected FT-X 08:30:13 executing program 1: time(&(0x7f0000000240)) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x8400) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(0x0, 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:13 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffff, 0x80400) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/21) dup3(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/187) 08:30:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x5}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) [ 365.775606][ T3353] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 365.819402][ T3353] ftdi_sio ttyUSB0: Unable to write latency timer: -71 08:30:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) [ 365.862755][ T3353] ftdi_sio 6-1:0.2: GPIO initialisation failed: -71 [ 365.892900][ T3353] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 08:30:14 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x400000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @multicast2}, &(0x7f0000000240)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x22, 0x8, 0x1, 0x181, r0, 0x0, [], r1, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000180)={0x200, 0x9b1, 0xe8, &(0x7f0000000080)="bb8debfd42368f239a32cef6667fcf12c967deb5fd0925bc36298ff93f474a78689603e829ac82c871098ca8d0ada14c18212c4c896e8e719385cc8d82465cf53e3bafffe033bf9cf814a791668aa2ea97066fc2cd800153299b69b3c1ce2a0b959611e8805918a49f0027e52086284979adca805acc885b4c47fd6e7d3b567ba4360d447712e8e531869f8df132ab1281adde739f76c3732d9ef6b6a370d73eb76ce28c9f4469dd8c11c7d7f6654526c11f201df3c6f81c2bcc627636d3176f4ab0809d9fefba3e057e6862e525978907015e9ac80e81a82bc711d1244d19a2666066313fa86589"}) 08:30:14 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x8000) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x627eec001b631fff, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000180)=0xd) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r0, r2, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000080)=""/187) [ 365.965983][ T3353] usb 6-1: USB disconnect, device number 3 [ 366.013210][ T3353] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 366.023597][ T3353] ftdi_sio 6-1:0.2: device disconnected 08:30:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xd}}, 0xf0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000040)={@remote, r4}, 0x36e) 08:30:14 executing program 0 (fault-call:4 fault-nth:0): r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:14 executing program 5: r0 = socket(0x18, 0x0, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x36824f74f63e9148) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2e, &(0x7f0000000000), 0x10) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 366.356808][T14073] FAULT_INJECTION: forcing a failure. [ 366.356808][T14073] name failslab, interval 1, probability 0, space 0, times 0 [ 366.370361][T14073] CPU: 0 PID: 14073 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 366.378305][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.388409][T14073] Call Trace: [ 366.391748][T14073] dump_stack+0x191/0x1f0 [ 366.396111][T14073] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 366.402045][T14073] should_fail+0xa3f/0xa50 [ 366.406501][T14073] __should_failslab+0x264/0x280 [ 366.411464][T14073] should_failslab+0x29/0x70 [ 366.416081][T14073] __kmalloc_track_caller+0x1ad/0xea0 [ 366.421483][T14073] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 366.427580][T14073] ? __do_sys_bpf+0x9c01/0x12ea0 [ 366.432560][T14073] ? __fget_light+0x6b1/0x710 [ 366.437266][T14073] memdup_user+0x79/0x190 [ 366.441647][T14073] __do_sys_bpf+0x9c01/0x12ea0 [ 366.446454][T14073] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 366.452375][T14073] ? kmsan_internal_set_origin+0x6a/0xb0 [ 366.458546][T14073] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 366.464472][T14073] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 366.470561][T14073] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 366.476305][T14073] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 366.482227][T14073] __se_sys_bpf+0x8e/0xa0 [ 366.486579][T14073] __x64_sys_bpf+0x4a/0x70 [ 366.491026][T14073] do_syscall_64+0xbc/0xf0 [ 366.495503][T14073] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 366.501516][T14073] RIP: 0033:0x459a29 [ 366.505460][T14073] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.525086][T14073] RSP: 002b:00007f424bef0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.533694][T14073] RAX: ffffffffffffffda RBX: 00007f424bef0c90 RCX: 0000000000459a29 [ 366.541679][T14073] RDX: 0000000000000020 RSI: 0000000020000600 RDI: 0000000000000001 [ 366.549663][T14073] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:30:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 366.558057][T14073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f424bef16d4 [ 366.566049][T14073] R13: 00000000004bfe17 R14: 00000000004d1c20 R15: 0000000000000005 08:30:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="771273583a069860132b08fc494c444043af27107a052f49bf80ed5ea03bcb4d4b4dbc3ce9eb031b951e9c2024eb100352c40cd8e2bc18f4bb3effc40df1f671c6289a146d1e5f57911b8ce37ab2ea1fac65c968737da2413acb6a4a81ee9a5f305713633d2179cbaec7938e9fc6bbd46b742866fb7da7bfbd13e942bafb822e2565dd636c481d2d20c1975e196128552b3ce4f58454b9f63a9dc1b2ce8e03382a62ff00985da0d0ce44a4cdd5663b484dba79f218346740cb226917c9cd37dd15dd58193cd5c00993b05ba9de43d2ba4db49241fe1ad7a3c42af43114869a9c26", &(0x7f0000000080), 0x6}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x62) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r6 = dup3(r4, r5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r3}) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 08:30:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1], 0x17) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967480b41ba7860f46ef65ac60bded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 08:30:14 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000004080)={0x4000000000000000, 0x5000, 0xc6a, 0x1, 0xa}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0x14}}) 08:30:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000140)={0x100, 0x7, 0x10000, 0x1, [], [], [], 0x100, 0x101, 0xfffffff9, 0x80000000, "cc061ce62ec453bf61bff522870d6e4d"}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r1, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) futimesat(r8, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:14 executing program 0 (fault-call:4 fault-nth:1): r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101881, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x6, 0x80, 0x5}) 08:30:15 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xc0, 0x7ff}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x1f, @mcast2, 0xfffffff9}}, 0x80000001, 0x7a, 0x1, 0x1, 0x10000}, &(0x7f00000001c0)=0x98) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2000000}) sigaltstack(&(0x7f0000541000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 367.035041][T14105] FAULT_INJECTION: forcing a failure. [ 367.035041][T14105] name failslab, interval 1, probability 0, space 0, times 0 [ 367.047964][T14105] CPU: 1 PID: 14105 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 367.055907][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.066013][T14105] Call Trace: [ 367.069385][T14105] dump_stack+0x191/0x1f0 [ 367.073793][T14105] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 367.079759][T14105] should_fail+0xa3f/0xa50 [ 367.084272][T14105] __should_failslab+0x264/0x280 [ 367.089285][T14105] should_failslab+0x29/0x70 [ 367.093969][T14105] __kmalloc+0xae/0x430 [ 367.098156][T14105] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 367.104083][T14105] ? __do_sys_bpf+0xbf12/0x12ea0 [ 367.109057][T14105] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 367.115405][T14105] __do_sys_bpf+0xbf12/0x12ea0 [ 367.120245][T14105] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 367.126177][T14105] ? kmsan_internal_set_origin+0x6a/0xb0 [ 367.131939][T14105] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 367.137865][T14105] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 367.143953][T14105] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 367.149689][T14105] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 367.155619][T14105] __se_sys_bpf+0x8e/0xa0 [ 367.159971][T14105] __x64_sys_bpf+0x4a/0x70 [ 367.164524][T14105] do_syscall_64+0xbc/0xf0 [ 367.168985][T14105] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 367.174900][T14105] RIP: 0033:0x459a29 [ 367.178827][T14105] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.198448][T14105] RSP: 002b:00007f424bef0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.206881][T14105] RAX: ffffffffffffffda RBX: 00007f424bef0c90 RCX: 0000000000459a29 [ 367.214876][T14105] RDX: 0000000000000020 RSI: 0000000020000600 RDI: 0000000000000001 [ 367.222862][T14105] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.230859][T14105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f424bef16d4 [ 367.238846][T14105] R13: 00000000004bfe17 R14: 00000000004d1c20 R15: 0000000000000005 08:30:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x100, 0x4) 08:30:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:15 executing program 0 (fault-call:4 fault-nth:2): r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 367.417076][T14116] mmap: syz-executor.5 (14116): VmData 35295232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 08:30:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280)=0xf274, 0x6, 0xd) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@deltaction={0x110, 0x31, 0x300, 0xfffffffb, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x18, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0xb, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0xcb6b}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x9, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:15 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x950, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) r3 = syz_open_procfs(r0, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000380)={0x14, 0x11, 0x0, {0x8, 0x4, 0x6}}, 0x14) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = syz_open_procfs(r0, &(0x7f0000000400)='autogroup\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect(r5, &(0x7f00000001c0)=@ipx={0x4, 0x9, 0x80, "b5fecec1be66", 0x5}, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r5, r6, 0x0, 0x800000bf) r7 = socket$unix(0x1, 0x1, 0x0) connect(r7, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(0xffffffffffffffff, r8, 0x0, 0x800000bf) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f00000000c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x20002000005) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self\x00', 0x800, 0x0) 08:30:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x400, 0xeb, 0xffffff00, 0xc7a3413b17b36cde, 0x1, 0x6, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x0, 0x8, r0}, 0xffffffffffffff49) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20) 08:30:15 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00202b00fe8000000000000000000d090000000000006ff31b4100aa00004e200000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a00000000000000000402"], 0x0) 08:30:16 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x2) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={'bpq0\x00', {0x2, 0x4e24, @multicast2}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fff, 0x4000) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xff7fffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x4000001000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") 08:30:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x100, 0x1, 0x0, 0x200, 0xffffffffffffffff, 0x40, [], 0x0, r2, 0xffffffff}, 0x3c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x3, 0x80000) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000000540)={0x2, 0x0, 0x7, 0x8, 0x6, 0x1ff}) r7 = fcntl$dupfd(r5, 0x0, r4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f00000004c0)="11dca50d5e8d67e9c3d4abafd2a5bd030bcf407bf070a9") ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000480)={0x3, 0x6, 0x5, 0xff, 0xfffffbff}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) unshare(0x40600) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000000c0)=@isdn={0x22, 0x1, 0x8, 0x6, 0x40}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="322e3ca734c927d91fc2d929d823b61b16286e42353cfb4bae697007e6de0168525735fe409206f80d383f8ea65b309a6f73e6e8295e53b7e0d35d679cac492153d893fd4801bca330bf547de587280cbd01beecd6952321dd89777f45b91c4ee56aabca2419fe0308453c07158120a620e8a32d6349105f15cd5221fbd34c670a665cf2c8103e4f54229fa181cba3635d4b691dd386879531505b9108e82fac08eb6c63a9c13a7e912d32462cc8ca894e4acfb28c30d1725a7accab8206d2cb10c161b934c576813c3b404301453ec6a041", 0xd2}, {&(0x7f0000000300)="9954d27ad895afa95d3c614048ab64690d65924f1ae8228a0f0dddc0d0ac824f1c468428ef75117af7994555c919151ecea4e3fdb95e84f59659869c722a84f24a779e26677327da6b23128e5eb8e7606d481af9327e42435f5668a6b9b3e687b47ffc2b785fe1b37544e0708b5f96b15615b781c04b4c79ece32057d4e19907df3678e2831f7909f842d2073c8e6bcb793db581250dfc3393c8db4213e449b7d21ca3fb13e5824715809dd074b9c54c739a", 0xb2}, {&(0x7f00000003c0)="0124bb3e442fd7d0860fdbc51d0dc9cab2e152d19f9a454bec36e6dd146787691c557cce66a05c082f2ae5c633b9fad6ddeb864368bb9901483f23f9c5b55b59780f6da5d643ec171aa1e9f818c039e42da302628d649b51854bdf5a5e2b4bb39fbfedd54c57b24886dff3c0d00e44d844fa61faacea3a2c9d20c1550ac87bd0c2e2f10e", 0x84}], 0x3}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc08c5102, &(0x7f0000000180)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r7, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f00000001c0), 0x0}, 0x20) 08:30:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0), 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0xffffff42) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000080)={0x5, "3bdd1a08791bc47da382adddd7c8f8b30a01ca2d46940074b5ee9f57bd9bb843", 0x2, 0x2ed24d191094a328}) [ 368.170942][T14168] input: syz0 as /devices/virtual/input/input5 08:30:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 368.251571][T14169] debugfs: Directory 'vcpu0' with parent '14169-8' already present! [ 368.334790][T14168] input: syz0 as /devices/virtual/input/input6 08:30:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x10000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xf4f63ac29665f86e, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x92) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1720}}}, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x15, 0x22, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:16 executing program 1: r0 = socket$kcm(0x2b, 0x10000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x6, 0x400) write$P9_RWSTAT(r3, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000080)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYPTR64], @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX=r8, @ANYRES64=r9, @ANYPTR, @ANYRESOCT=r3, @ANYRES32=r2]], 0x8) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x12400, 0x0) ioctl$TIOCLINUX6(r10, 0x541c, &(0x7f0000000200)={0x6, 0x1f}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x840, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000300)={0x36, 0xc0000000, 0x3f, "d793cf012bc5858d244302008cb383a776e9aa806f4acb314237027c3d7612a56150e708e39af774d32f6abad6908296fc599e57b890"}) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='+cru -pids -rdma '], 0x11) 08:30:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x8) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:16 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) dup3(r4, r5, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000180)=0x1000) dup3(r0, r1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x6b}, 0xb) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x20) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x60400) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x400, 0x4, 0x3f, 0x33, 0x38, 0x20, 0x6, 0x0, 0x80, 0x1f, 0x20, 0x3, 0x6}, {0x4, 0x3a, 0x3f, 0x8, 0x80, 0xdc, 0x9, 0x9, 0x5, 0x81, 0xff, 0x7f}, {0x0, 0x5, 0x3, 0x8, 0x40, 0x2, 0x28, 0x0, 0x3, 0x3, 0xa1, 0x3, 0x200}], 0x5}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x10001, 0x404002) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x9885}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x140800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb4e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x61e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048820}, 0x885c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000003c0)={0x3, 0x3, 0x6}) 08:30:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KDSETLED(r12, 0x4b32, 0x6) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_PIT(r9, 0xc048ae65, &(0x7f0000000100)) r13 = creat(&(0x7f0000000040)='./file0\x00', 0x28) ioctl$KIOCSOUND(r13, 0x4b2f, 0x698) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001600100001000c000700000000eaffffffff07001b0000000000"], 0x3c}}, 0x0) 08:30:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x3, 0x3, 0x10, 0x754, 0xb4, "1360b639c9deda3b209efd589b9402c7b13a686605fa4468743998684df34f5a01aa0af86dafdbbef30c036919f5ed2a7ee278f543dba56bd0076449396b8e57fd91d8af0b552d48fdfb213524c4da65c059174ddc3996158184f4788bcef3316a926eb0c253c63ee2298c930967c4bb89c6f099af2b02eccead3b3a26ed0886aa687bbfb72824e42d7232c4f7ee386d3f22f5ab289b9020215b3766f096cf71dafa9b6318bc023a1fbe2836ad7884d85e078766"}, 0xbe, 0x2) 08:30:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, 0x0, 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:17 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x7, 0xa0000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000240)="f6b43b75b31d6d00e4111aef028716e1ce9c0b3ed5288589a7ec6e93894454ee16a6fe6fc0488ea2d2eb6c3fea0b220a50ae55156f36b26e8ab729ef7d4f99288d17a256faaae98f6110a217492690e54b8842d4d0411f4f9680fcf626ae0bef3c05397622ffef26f93ce9d99f330bc22b556ea2b366ab04b2d90bbd2ef5e2fe3f7b68dc5fe037e124d9452b52409353543965b466983c118395d2283fabcb384dae2f78e7b642109254d8ab7694185a6b37ee404719792bcbb965454f6f9f5b234818c891670627f7cb1b3f3cf11d68") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[0xbe8, 0x2], 0x2, 0x1f, 0x9, 0xffffffff, 0xd268, 0x91a, {0x2, 0x8, 0x5, 0x1, 0x8, 0x7ff, 0xffff, 0xfffa, 0x0, 0x3, 0x6, 0x2, 0x7fffffff, 0x42, "2cd678561ecae9ad016725201714e96ecb88686f3aef5585f39a39cead2f7f8e"}}) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc), 0x4) [ 369.127991][T14231] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 08:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket$tipc(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="0644d1ab26b4ec6a415753528a", 0xd}, {&(0x7f0000000080)="53da1341d96d13", 0x7}, {&(0x7f00000000c0)="7a3a4f5c395e24888386ec5bde7add0a762a284ae59bb8174aa1cc61327e583e0bb740", 0x23}, {&(0x7f0000000100)="1f5486bf7874ee5b4f13de902a3c63a09c548f55262eb5b3bf1b91955c966aa09d7d56d8ed7a2b0de7b8b039130e3b1f0790540ba0180b8bec7855cdfa1928b6f429412906be3a55c798b5230e2a79057cd152d1c0c052c338247d755df1f108a577ddc853d714d5485108ec17b4382a4a38846421ae25e4fbaf89f4418fcec4585036de646e05083db03221ee90a95f468e08478b0f0cac530ace5933038fb45e9fe6e84b7a05ba4d9e1babfe62fcf2b855c6f951e29528782ca6f027b70382afc050ef7272603253f346cab14c877642386e2c54abb665797ce65c800010744a931d62d3499686df2cb950ad4a1116228fa5f98aa0aed68b0fcc", 0xfb}, {&(0x7f0000000200)="faa7bf046521ef2256ca6efb0a2fff4a81c3e5f569dbd21953802e42308bcd0dc42458e77a8f0933afcc2296c9f62d6ddd", 0x31}], 0x5, &(0x7f00000002c0)=[{0x58, 0x29, 0x200, "7af1f9b66971f2be50cb7789a0a102f301200c7d9d47169d1e135703d0771ea173bde5ad59355f50185e7859f25a91c18f8a0ec909dd1fe5798364af34486d1740"}, {0x90, 0x101, 0x3, "aaf1e31950ebbb26d91da0b6afcd2c80cc151e096c8d590d8dab5bccbb6a8c993e33a53b6837a5ac10142332cb013c6e430ca14e0ac12b5062649ffc996ee6e3a44cf9f267fd3d1e556fe6ce7501f72dad9fbd9bba8f9c79e08c44422f018800ae1bc170f9a6bec52c93039e68d127da9d5ab8084da65374af5b5bc1"}], 0xe8}, 0x4008040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 369.303100][T14247] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 08:30:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = open(&(0x7f0000000040)='./file0\x00', 0x8648c2, 0x2) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="000006000000000000000180c2000002aaaaaaaaaa360180c2000000aaaaaaaaaaaaaaaaaaaaaabb8bc6901f1622b632bacd025dec663a0025914afd9167db67459be04b8ec86d25d8339b855d45161c35547f873aa65564370df0f1055aed6682dd6ebe34f5417c889b92ca01003e77a9566a5c29b1f052527af361c69f0fc8f546ecd715979faf956f6ac2ef7970c8ac0b"]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000220000002200bedc2a5443640a789bdd51ea62d0409bc578290bb75545b86415f523b546d3b9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x10001}, {0x5, 0x1}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x18, {0x18, 0x22, "d48419eb122b68779054a7836dbc3371ba24f86200d2"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000000180)={0x0, 0xf, 0x53, {0x5, 0xf, 0x53, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x0, 0xff, 0x7ff, 0xfe}, @ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0xa76, 0x5f9535394a10b1c9, 0xfa44, [0xff9f, 0xffc060, 0x37, 0x7f8021, 0xffc00f, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x20, 0x8, 0x1c, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x1, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x7, 0xc, 0x2, 0x3, 0x1f}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x4, 0x79, "5def258c", "da5c6f2c"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x0, 0xd9, 0x3f, 0x3ff, 0x929c}}}, &(0x7f0000000840)={0xac, &(0x7f0000000300)={0x0, 0x12, 0x1a, "c4bbaffd9f9e4900325e3790c349d26f3d9f0676ccc094545c78"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3f}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "8b"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "54fc85"}, &(0x7f0000000440)={0x20, 0x83, 0x2, 'd\r'}, &(0x7f0000000900)={0x20, 0x84, 0x4, "00dca400"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "8561fd"}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x160, 0x20, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000600)={0x40, 0xb, 0x2, "89ed"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, '~2'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x89}}) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r1, &(0x7f0000000080)='\x00', 0x1e8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 08:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x16, 0x22, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:17 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) 08:30:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000240), &(0x7f0000000180)="19600891acab932d406a00932852905e37be988b76b87c9b108176800aa698e9c2a169627323424b1816acb4316ad4459eafda3d1b93392c0190a145b14abb3831fa2a7ceb8e486514e22d8eef5df682684a8fa8269afa3cc0f010cc63cfb632c603581566221f9f2d106dff6530b805b61fc4cf4f0ada7b54003f712639b3dc560400"/149}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r4, 0x7628e4edca26cfa3}) 08:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e23, 0x10001, @dev={0xfe, 0x80, [], 0xa}, 0x8000}}}, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x30000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0xce9) syz_open_pts(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x4) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x10, @tick, 0x80, {0x4}, 0x9, 0x4dc33bdf33ad4f1b, 0x40}) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) r9 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000080)) dup3(r8, r9, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KDGKBENT(r12, 0x4b46, &(0x7f0000000380)={0x9, 0xfb, 0x401}) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000000)=0x8) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_inet_SIOCRTMSG(r13, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)='ipddp0\x00', 0x8001, 0x2}) clock_nanosleep(0x6, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)) dup3(r0, r7, 0x0) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f0000000080)=""/187) 08:30:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x0, 0x100, 0x4, 0x5, 0xbfe7, 0x8, 0x0, 0x8}}) [ 369.843497][ T17] usb 2-1: new high-speed USB device number 15 using dummy_hcd 08:30:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = socket$isdn_base(0x22, 0x3, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$inet(r1, &(0x7f0000003680)=[{{0x0, 0x25b, &(0x7f0000003400)=[{&(0x7f0000000ec0)="a6", 0x1}], 0xb7}}], 0x1, 0x0) 08:30:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xf7, 0x111200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000000c0)=0xffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000200)=0xe8) r4 = request_key(&(0x7f0000000340)='keyring\x00a\xc9\v\xa3#Y\xe1\xde\x8a\x939j\xcb0\xce(\n\x9f\xbd\xf7~\xbb\xcd\x94\xbe\x97\xdf\xe3=y\xdd\xe0|5f\x91#)/\xa4\xad\xd1\t\xe0L\x974\xba\xd7\xd9s\x01\xb8\tF\x83\tP\xfc\x9c\xff\xa9%\xc7|\xd6\\\x82\xe5\xd9\xe8\xf9\xbe%\x18\xc4\x0e\x85\xda.6\xffJb\xc2 \xe1\x1de_\xaf\x9b\x99\xa3\xe8z\xd9s\r\xab\x96\xf8\xf2r9\\\x85\x81O\xdb\x92\f\xed\xf5a\xc4\xf3G\xf7\xad[\xf6\x0f+\xfa\xabn\xd3\x1aRUf}\x9f\xfd\x01\x86\x91\x18\xc2\x02\x18K\b\r\xc9\x03\xb4|b\xff\tN\xb7\x80\xec\x8fs\'\xd1tb\\\xe0\\\x12\x8f\x95', &(0x7f0000000300)={'sy\x06', 0x0}, &(0x7f00000002c0)='/dev/audio#\x00', 0xfffffffffffffffa) keyctl$get_persistent(0x16, r3, r4) 08:30:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x8, 0x60004) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 370.082348][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 370.203064][ T17] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.214143][ T17] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 370.227655][ T17] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 370.236878][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.297875][ T17] usb 2-1: config 0 descriptor?? [ 370.794357][ T17] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 370.807248][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input7 [ 370.908075][ T17] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 372.072196][ T17] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 373.242180][ T17] usb 2-1: device descriptor read/64, error -71 08:30:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x100) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x2, 0x0, 0x3) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x7fe, 0x4) sendto$inet(r1, 0x0, 0x100000145, 0x49055, &(0x7f0000cd2ff0)={0x2, 0x4e24, @broadcast}, 0x1) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0x0, 0x0, 0xffffffffffffffe9, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) 08:30:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x890, [], 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffc4c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$UHID_DESTROY(r3, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:21 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x80042) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x28080, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000001c0)={r8, 0x1}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r11, 0x810c5701, &(0x7f0000000200)) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/187) 08:30:21 executing program 1: r0 = socket(0x100000000011, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x8, 0x800, 0x1) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000180)=""/246) dup2(r1, r4) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x35, &(0x7f0000000100)={0x77359400}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080)=0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x94840, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000002c0)={0xd000, &(0x7f0000000140), 0x1, r8, 0x4}) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000300)={0xfffffff7}, 0x4) [ 373.434609][T14348] QAT: Invalid ioctl 08:30:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000880)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x40002) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b80)={r3, &(0x7f0000000bc0)="b7c6e7198311cbac9b2f1f279add43609b6a4ba5d5e85497c725f64365093b5db5e7315be66cf2846363c0d9d3e298e41456d4936b5178dc21226577df3862f2a1c1f5a59c5b428dbe963ca3b1733f0a336fc8f6b46a6b47ca99ef20772390a11f243107885f07f475ffe4b0a976b614f318215e26df92ee5e8e0442c2e216889092447119a14dc4f306f1e5fa1a1d36c58a265d03717f4442d623e8763294778e9419de6ae5e865d00450b85deb3d5c7fd6b991f34bf36db5018b01d4e4c8a8b0631c36e3e5aceeb79e7d6b196e2be5edba60de470866a0d5e37441a796d2ee4fd26280b4f47ef9a076bc", &(0x7f0000000800)="85e90c0ba363170e52a4b77e2f18a8fd30a5d0682f6fe6e5978e160bbd39982390357fa3ed06ad2c6928ad5327be47e52acd6969d6b2fe81983065171d6185f484a55122b2587a8f79c40147cb3f79c992a93dc7601e4dcf1fdc55281719463f6d1ca61bfc34f8cbb9960ebea3656f38e3d4"}, 0x180) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r5 = socket$pppoe(0x18, 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @rand_addr=0x3}, 0x1, 0x1, 0x4, 0x1}}, 0x80) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x181000, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="356615a159cb8d9ad1f8d7b322fe3dbfa972da31383e18f5ee52e2911e22ad71e9abbcf9b250ed366d9e58ff41a7024482b06df9151268a24e1dc6898fb6fcd05dce3655fdb0224df249f1fdef37520f5d8f3a12e82c300e59030a7e34976ec98e12c55b90dcd6ebbf186d49f51c930dc884ff171a44f95bc043558c51b09f62de605909441c114632a6a9ed305eaa68d9889fc3987c918f1be24315df6ccc6059bd7e974f91bf01656965df3600658508915b1adb01bac05c353429522aee0d00d93d932b788c22b0be8cbac967a0f1335207872ec94814c9ed41fd52afb183a08946db51838ff4ff", 0xe9}, {&(0x7f00000002c0)="e01906cbb72ad240e68b7bb812767fa42505b73a7a5363dd9e8ddb4c1407e47c88c70cc31b96a183d6f38bd0c830530ff9ddef4658fdc97874e1c33e24b351965674f42b7ad005adb7eb5fa9429643793fd7a4238908507784ef7ca6ab0012a73736", 0x62}, {&(0x7f0000000340)="9f6af69e77d1c9ea9f2fbb829661bc7a582cb48586363c95a911db389bc7a7919fa1d8ded46c51a59bc876a41761eceebde842b1761271bf2e23b3d5603cd80fc55c85cc91f6d9e38357299cc0e52d0899ac15be0a5589cc89bf2dd1e97961b96bcbed265067477b7d0e4c725dba3910ba19af64237d3249bafa1d4e09c660344a93cd0cbd06c2be495895cf0f4773d83fb012de2e7d983f22e5dc365d0e3f947b86ca2af0506ac15dfe1b657ae0538b9183bb744a50c665423900cdb46476282ce7da6ff83c2b652bf13ebe071b179290fbe96c456959ace4070c642101fc092f75f7076b17f8202d95a33bfaa1984ab6e224546424", 0xf6}, {0xfffffffffffffffe}, {&(0x7f0000000440)="bf35bf1449a7c9d33c2d25938aeab838d261209a9d0c41c3c12c12a2c2c15352bac0560b2e548a65f39d7b248e773b30fee60db0534d985329cb0bdaf0fe9a091da75ce39c5bb6fd551918608e86b7b26ad23199a7451a5935eedee822d5814761efd043bc43ab9542ee18ae8dd708f4c43fb307737fc65bc9fd3c275fe8c70469056b82bd10d234f45e7e3d769f474bcdee6ba5c18e", 0x96}, {&(0x7f0000000600)="1e033969673689f47a7821fb7803488f70bd987b8338c54903bd67fc1212d55beaf2b6d3263c351bcb00e9e4e7ac5ebd2e0bacfb9a6b8c2bbcc2654f66bf1253fb1beceaf1e5bba65ef84f6a991729b2b4593247eee259bb16a4a186500ac67a9760166cee8f75bd42c558c21df6c9b0d01c36277d5c6c9b776f3968ad85686117793a9a6f674100df243c303f8f17b74cfddad215d04c30a907ae08f7ccfe46b7db9fd8e00e91a4f212878058fa4f3e88744d703377d9e0c1cbe6ebedd33aedd1bfc461a02eeee9cf082738113cb9d107b8c988519104ddc3ab4a9be9f7311b792bae589eb240908b", 0xe9}, {&(0x7f0000000500)="1557a42f364fe2c2275f6c1ccaf25940a65383aa07cf3e6b9a521cac09c77a6a1d132169dff8e7bdc190d34ad9a781baa88ec152e4f98a213ab009aec26477d3c7003926c2326e33e273af92d60511a4fe9710823b615567f5b7ba95f11cf6afe233cccf5abed9354286b4cbedd1d18f1aabf658304d99552cca18b7c955391c0c1a35b6cb0221746b0af5f09d9551ea45d86b1400968278607e2a2000ed98664f88f4609d43df", 0xa7}], 0x7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x110}, 0x4000001) ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f0000000100)={0x5cf5, 0x7}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) 08:30:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7fffffff, 0x602002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x4001}, 0x20004800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x4a4d5ae69813d053, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x6f) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="4ef27f454c4600000033006c0000000000ffffff831a7cfcff3af5317bffff20008000e00009000401000000b0e244096db4000000000000b46f1eab03d380ab50161eb22068a46392150dcc78a30126dd3f2250156d3787e1fd9a9785dc9bed843f6eb774623e829766a2341f415f3d822b43c80d66771a1666e6a629450d39"], 0x38) [ 373.677965][T14348] QAT: Invalid ioctl 08:30:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:21 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$TCSETXF(r4, 0x5434, &(0x7f00000002c0)={0x3, 0x5, [0xc8ae, 0xfffa, 0x5, 0x8, 0x868], 0x7fff}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x2, 0x5, 0x4e, &(0x7f0000000000)="36c74cdfb5e2ab335d7be08a640b4fb8970974287cbe15a8b140de6677950b37495673754344fe0037c3a5039d69ed78330a061a09c00ea4a8ad9997e6b6a093a105c9fabaa713e0daa38be07144"}) 08:30:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) dup3(r4, r5, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000240)=""/169) dup3(r0, r1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x53, 0x0, 0x4, {0x7f, 0x7}, {0x7fff, 0x2}, @ramp={0x40, 0x1000, {0x200, 0x5, 0x5, 0xa524}}}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)) write$P9_RREADDIR(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="c500000029010003000000800400000004000000000000007d000000000000000007002e2f66696c65300200000000020000000000000001000000000000000707002e2f66696c65300004000000000000000000000000000000000000000407002e2f66696c6530ce020000000800000000000000ff010000000000000007002e2f57696c6530af02000000070000000000000005000000000000001307002e2f66696c65308a000000000400000000000000b6170000000000000607002e2f66696c6530"], 0xc5) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_dccp_buf(r9, 0x21, 0xf, &(0x7f0000000000), &(0x7f0000000300)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) fcntl$dupfd(r11, 0x0, r10) ioctl$KVM_DEASSIGN_PCI_DEVICE(r11, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x1, 0x7fff, 0x3}) 08:30:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, &(0x7f0000000200)="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", 0x0}, 0x20) 08:30:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x1, &(0x7f0000000040)=@raw=[@generic={0x1, 0x2, 0xe, 0x0, 0x1000}], &(0x7f0000000080)='GPL\x00', 0x0, 0x64, &(0x7f00000000c0)=""/100, 0x100, 0x6, [], r4, 0x1d, r7, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x9, 0x100, 0x3}, 0x10}, 0x70) 08:30:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80880, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000140)) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="2400000020007be11dfffd946f6105000a0000031f0000000000080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000014000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) splice(r3, &(0x7f0000000000), r0, &(0x7f0000000080)=0x3c, 0xabf2, 0x8) 08:30:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 374.135466][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:30:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 374.313934][ T17] usb 2-1: device descriptor read/64, error -71 08:30:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x44008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfa2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc000000070000001000000001000006040000000d000000060000000f000000000000010000000009002a00030000000000000a040000000800000000000009000000000500000000000002050000000a00000000000007000000000e000000040000060400000003000000eba6000003000000ff0f000074000000050000000e00000000000000000000000000000b0500000000000000000000030000000003000000020000007e2455da933558a8c0d3fe6c34010000000e00000001000085060000000a0000000400"], &(0x7f00000001c0)=""/161, 0xdb, 0xa1, 0x1}, 0x20) [ 374.428005][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:30:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80880, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000140)) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="2400000020007be11dfffd946f6105000a0000031f0000000000080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000014000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) splice(r3, &(0x7f0000000000), r0, &(0x7f0000000080)=0x3c, 0xabf2, 0x8) 08:30:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) bind$packet(r3, &(0x7f0000000100)={0x11, 0x7, 0x0, 0x1, 0xc4, 0x6, @random="5c32634df9f5"}, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$TIOCCBRK(r6, 0x5428) [ 374.592183][ T17] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 374.627433][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:30:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 374.842298][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 374.885293][ T17] usb 2-1: device firmware changed [ 374.891409][T13799] usb 2-1: USB disconnect, device number 15 [ 375.202223][T13799] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 375.442463][T13799] usb 2-1: Using ep0 maxpacket: 8 [ 375.562671][T13799] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 375.570736][T13799] usb 2-1: config 0 has no interface number 0 [ 375.577014][T13799] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 375.586913][T13799] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.599974][T13799] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 375.609206][T13799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.618967][T13799] usb 2-1: config 0 descriptor?? [ 375.668125][T13799] usb 2-1: invalid MIDI out EP 0 [ 375.675886][T13799] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 375.870591][ T3353] usb 2-1: USB disconnect, device number 16 [ 376.662179][ T3353] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 376.912228][ T3353] usb 2-1: Using ep0 maxpacket: 8 [ 377.042255][ T3353] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 377.050388][ T3353] usb 2-1: config 0 has no interface number 0 [ 377.057415][ T3353] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 377.067312][ T3353] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.080262][ T3353] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 377.089451][ T3353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.098719][ T3353] usb 2-1: config 0 descriptor?? [ 377.148021][ T3353] usb 2-1: invalid MIDI out EP 0 [ 377.154943][ T3353] snd-usb-audio: probe of 2-1:0.2 failed with error -22 08:30:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x2846, 0xfc, 0x3, 0x6}, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0)=0xffffffff, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:25 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0xfffe}}}}}]}}]}}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x5, 0xf546, 0x5, 0x1, 0xa0, r1}) 08:30:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) close(0xffffffffffffffff) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 377.348877][ T3353] usb 2-1: USB disconnect, device number 17 08:30:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x3, 0x22, 0x10000004, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000040)="3164b79cd730d59d2c29118867264846d7ba130a247d9bb98cf52bc7e00000000072f437476aa0f91dc7d4e4c2d17c94eb"}, 0x20) r1 = signalfd(r0, &(0x7f0000000080)={0xff}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r0, &(0x7f0000000140)="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", &(0x7f0000001140)=""/154, 0xc}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x70, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa112}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) 08:30:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x6dd40, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r4, &(0x7f000000a240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001080)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb2467383cc1aed01070e1fcb514360150d6881246fe8430e63b7198b1585e82dafc837d017a135493254e8d40163cc9935a72a560afad8c02a67f2ec48792a282db9c79dc7b3a80e8bed9590f01fe38ea1767c82328564461a3f15ea96adc7d3edbbec8bb92", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) 08:30:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 08:30:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0xffffffa3) 08:30:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) [ 377.742568][T13799] usb 6-1: new high-speed USB device number 4 using dummy_hcd 08:30:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80200, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000240)={0x1, [0x80000001]}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB="0000000000000004"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x33f, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0x8}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x9000}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r5, @dev={0xac, 0x14, 0x14, 0xa}, @remote}, 0xc) 08:30:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl(r1, 0x7, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 377.825287][T14476] input: syz1 as /devices/virtual/input/input8 [ 378.112484][T13799] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2046, setting to 1024 [ 378.123859][T13799] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.332567][T13799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 378.341803][T13799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.350054][T13799] usb 6-1: Product: syz [ 378.354427][T13799] usb 6-1: Manufacturer: syz [ 378.359056][T13799] usb 6-1: SerialNumber: syz [ 378.606403][T11786] usb 6-1: USB disconnect, device number 4 [ 379.382195][T13799] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.742517][T13799] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2046, setting to 1024 [ 379.753785][T13799] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 379.922443][T13799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 379.931552][T13799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.939930][T13799] usb 6-1: Product: syz [ 379.944270][T13799] usb 6-1: Manufacturer: syz [ 379.948944][T13799] usb 6-1: SerialNumber: syz [ 380.195330][T11786] usb 6-1: USB disconnect, device number 5 08:30:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) lseek(r4, 0x15, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_NMI(r3, 0xae9a) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:30:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x14000) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:28 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x4000004004002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x803, 0xc1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x3, 0x1, 0x2, 0x2, 0x8, 0xa15d}, &(0x7f0000000040)=0x20) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 08:30:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0xa, 0x5, 0x5, 0xffff02d0, 'syz0\x00', 0xb9}) 08:30:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r6 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7, 0x400000) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x6d) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x800, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x11c853}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r2, 0x5d73f9d944de8b89, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7f}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r3}, {0xfffffffffffffeb7}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 08:30:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) rt_sigsuspend(&(0x7f00000000c0)={0x5}, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000040)={{0x6, 0x0, @identifier="de3291808de4314c1674867f1e6797d9"}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r4, &(0x7f00000001c0), 0x0}, 0x20) 08:30:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet6_sctp(0xa, 0xf, 0x84) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7a51, 0x200) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x40, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x50f03e8ceb206964}, 0x0) sendto$isdn(r2, &(0x7f00000000c0)={0x2040000, 0x7, "4d02aeb53666261b73377afa146e25f4713a7d53d783d206a7b103356d06ffb5592dc11d18389fbd96266174f3ba6020d75e36a30a0a5c59ff8c04ef98aecc5de2f7046d14b20d203ca543ae3d17457e11b18aa0a51ca7a59a0fad7bfca29b03ec60c2b303d0a54d5fc13a441a81d5999d647f4db5447c643252a8a9566c9d7906ea00c69a49e17492"}, 0x91, 0x48c4, &(0x7f0000000180)={0x22, 0x48, 0x9, 0x97, 0x4}, 0x6) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x10001}) 08:30:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000140)={0x6, 0x81}) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) 08:30:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x102000002) 08:30:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40043, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0xa, 0x5, 0x0) fallocate(0xffffffffffffffff, 0x18, 0x7, 0xfffffffffffff000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14) r3 = timerfd_create(0x8, 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0xfffff801, 0x4, 0x10001, 0x10001, 0x4}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) 08:30:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000004397740704000000004000d0d951781370fb4fdac565be2116da6eae66110dc30b17a6529d98e54ac5864059be32d3989787f6bc4e54cd0000000000000000eaaf744b011ca6a0e1c9d875e4db6728f77da28652458e2a63efd11d33a92ad1e5b1b5db36f01b8502ed964e913efdaa8c54925ed581b18c5ad0d7b5929892daa7a1"], 0x10}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0) 08:30:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', r3}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48, 0x2, {{}, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x4000000, 0x0, 0xffffffff}}}}]}, 0x74}, 0x1, 0x0, 0x0, 0xa4005}, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xc9a, 0x840000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x22, 0x4, 0x2, 0x5b, 0xffffffffffffffff, 0x0, [], r3, r5, 0x2}, 0x3c) epoll_create1(0x100000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000040)="71c89a15f83966b76163985ad066f9eea5ab327b214f108e08aacb94c3d22ac181e924e015ecf81992b62dfe697af4e63c7e086ec915321eecdfc968f9a1b85c4cdb0ee6807ce3dffd3000cfa2e79906be818a39bcc1a8b7280200071872e20a538a1abbe60ec9b8aea1ac155d2f80c6b46422c5b163a0898a815eb068fdef223b88105e641027fef26e3b4bfdcf8caddb65e49c633a13b77d749d410955865174907a946726e6e51acbea469e85f3b3eb28d6dd934b031493df3cef52b56e60334a3cc5b63d"}, 0x20) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r9, 0xdd42ddecb798d42f}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x110, r9, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5a35}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x47d46ff2}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4004080}, 0xc93aac6296d573c1) 08:30:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x102000002) 08:30:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) 08:30:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x2) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0xb04a6cad81b710f4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) dup3(r0, r1, 0x0) r3 = dup(r1) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) fcntl$getown(r4, 0x9) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000240)=@int=0x755caf58, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000000)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x7) 08:30:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x102000002) 08:30:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = dup2(r0, r0) write$P9_RWALK(r1, &(0x7f00000000c0)={0x71, 0x6f, 0x1, {0x8, [{0x108, 0x3, 0x6}, {0x10, 0x4, 0x7}, {0x40, 0x3, 0x3}, {0x60, 0x0, 0x6}, {0x0, 0x4, 0x8}, {0x0, 0x0, 0x8}, {0x18, 0x8}, {0x2, 0x0, 0x5}]}}, 0x71) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet_dccp(0x2, 0x6, 0x0) flock(r3, 0x4) 08:30:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) dup3(r4, r5, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000280)=""/80) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$dupfd(r2, 0x406, r2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="f3f4460f01d10f08f346fd66b85300400f3566b80b000f00d86666660f3882434766470f6e65db4381d4490000000f20e3", 0x31}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40000}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x80, 0x200}, {0xff, 0x80000001}], r12}, 0x18, 0x1) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 08:30:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r3, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) connect$tipc(r7, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$BLKTRACESTOP(r10, 0x1275, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x3, 0x3a}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) listen(0xffffffffffffffff, 0x101) 08:30:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x102000002) 08:30:29 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000000c0)) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000040)={0x8, 0x8, 0xff, 0x67c025c, 0xafee, 0x9}) 08:30:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x460040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pause() write$P9_RREADDIR(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a600000029020007000000a6000000000100000000000000c8000000000000000807002e2f66696c65304000000000070000000000000005000000040000000507002e2f66696c65305900000000040000000000000081e1ffffffffffff7f07002e2f66696c65301304000000060000000000000000080000000000000507002e2f66696c65302501000000040000000000000040000000000000000107002e2f66696c6530"], 0xa6) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x40440, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) perf_event_open$cgroup(&(0x7f0000000040)={0x6, 0x70, 0xff, 0x0, 0x6, 0xff, 0x0, 0xaa5, 0xc585599091dacde0, 0x18, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_bp, 0x4, 0x9, 0x20, 0x5, 0x8, 0x200, 0x1}, r0, 0x6, r1, 0x5) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, 0x0) 08:30:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x102000002) 08:30:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="d8bfeedcd0ce0bad3e292a6ae932721f60dd4bc2094ccf006b26fd42b8e306c43bbe81285bbe1591cc7c542d84685db0a4726b828aabbf2ca6f67db147335841d60191ab025273cf44643cfc9e93b2cf6a9d80b83a587861be135d3e", 0x5c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x5ac, 0x23f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 08:30:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x102000002) 08:30:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x2, 0x5, 0x401, 0x20, 0xffffffffffffffff, 0xfffffffd, [], 0x0, r2}, 0x436) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f00000001c0), 0x0}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) 08:30:30 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="a30200001e005f0814fffffffffffff8020000000d00000000000000870209002d020000", 0x2a3) 08:30:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000002) [ 382.532960][T13799] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 382.554104][T14637] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 08:30:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000002, 0x0, 0xc0010000], [0xc1]}) 08:30:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000002) [ 382.793531][T13799] usb 6-1: Using ep0 maxpacket: 8 [ 382.823136][T14650] kvm [14649]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 382.875098][T14652] kvm [14649]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 382.953084][T13799] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 382.966186][T13799] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 382.975445][T13799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.989973][T13799] usb 6-1: config 0 descriptor?? [ 383.038108][T13799] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 08:30:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000002) 08:30:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000640)={0x0, 0x1000, "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"}) [ 383.239630][T13799] usb 6-1: USB disconnect, device number 6 08:30:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x9faf) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:31 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000051f0fc6c90eccb421dd7a1c4bf5092e154a72a00c0"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r8) request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000380)='\x00', r8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x28, 0xffffff1f, 0x0, 0x0, {0x0, r7}}, 0x24}}, 0x0) 08:30:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x0) [ 384.022462][T11786] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 384.262153][T11786] usb 6-1: Using ep0 maxpacket: 8 [ 384.382415][T11786] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 384.395441][T11786] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.00 [ 384.404672][T11786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.472967][T11786] usb 6-1: config 0 descriptor?? [ 384.516911][T11786] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 384.714129][T11786] usb 6-1: USB disconnect, device number 7 08:30:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x4, 0x0, "a77760f5a7645bc43c3b1d69912dda0c7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b89e79ec28ef2818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe8f, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/226) 08:30:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x0) 08:30:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000000)="a82008503e407ec61550fe0c35859628af4e216a6019fdeb12d45ad03bd044cfd74850fb66f8eb03d458b97539e9", 0x2e}, {&(0x7f0000000700)="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", 0xed6}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1000}], 0x30}, 0x0) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x200006f8}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$KDENABIO(r4, 0x4b36) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$NBD_CLEAR_QUE(r5, 0xab05) 08:30:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_setattr(r6, &(0x7f0000000140)={0x30, 0x2, 0x2, 0x40, 0x101, 0x80, 0xe4, 0x9}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000000)={0x1, 0x1, 0x80, 0x8001, 0x101, 0x4}) r7 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r10, &(0x7f00000000c0)="93a29cdbea446b1965487f8beb94f2195ccf3e478ba0a0dc18def02c92c05441d0bf1b76df3117890f5ad604b629138880a6ec9fc4a35cfefb6b91885468c68bccb11d30d0d8da2ba119507f00b923d7acdce27a28bfc319d05909e29d349ba4846c0aed5d0e5b0d70da656bd41a5fca6d25e0d69da65a400000000000", &(0x7f00000002c0)="81ef42bba3000000e185999b2e03c000041895bdefff9a1d9ae23198fab9f604fe3cc65c7d38c0216d0cde79d183fe0946b2145abae5f9f066a756b63222204daebe164761437b6290da657b141d595cac65318e796ffee4ac6022374e670b07a43c4eeab57d53955fc9475bbe2a8e3263dbde83023dc59a1317f9f0d8df83789d1066c32e0fa510f71be44cba37346db44a07cd7b12a06e4343c92300e45f07d9ce1e52a991aa60099b9f0cea8bf6c27eb15c293babeee5e2b92cb206acd2c4004515eabc642bc00aef03f0611c4d147f87cfea25b99fd6220e5c32", 0x2}, 0x2a6) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x141000, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x8, 0x1, 0x4}}}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$FUSE_IOCTL(r4, &(0x7f00000001c0)={0x20, 0x0, 0x6, {0x8, 0x0, 0x7fffffff, 0x1}}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000100)={0x1, r5}) 08:30:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x0) 08:30:33 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f00000000c0)=0xbae, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20000, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x13fcc6a2eb1139dd, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x1) r4 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7, 0x100000) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x2, 0x0, "6143d7bbdbca6491dadd13eb6a7136713dabe7de6e548bb4cc0d7f227d9d5ebf09d64aba6a09686d8c14697ce22a41c1eb95c9913f14cd58fb4079bb373a3762f95a5af224b6d92f96d24fcb8fd9a152"}, 0xd8) r5 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x3ff, 0x44801) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000440)={{0x5, 0x0, 0x6, 0x4, '\x00', 0x80000001}, 0x2, 0x217, 0x55, r6, 0x2, 0x10000, 'syz0\x00', &(0x7f0000000400)=['(vmnet0md5sum\xbf(]&nodev\x00', '/dev/uinput\x00'], 0x23, [], [0x8001, 0xd97c, 0x38e, 0x694a]}) r7 = creat(&(0x7f0000000580)='./file0\x00', 0x12b) ppoll(&(0x7f00000005c0)=[{r5, 0x2000}, {r7, 0x1128}], 0x2, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={0x6}, 0x8) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000680)={0x54, 0x61, 0xd652}) r8 = syz_open_dev$dmmidi(&(0x7f00000006c0)='/dev/dmmidi#\x00', 0x100, 0x2b0440) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000700)=0x9, 0x4) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f00000007c0)=@req={0x28, &(0x7f0000000780)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000740)="d2cc4300f00f06aae22f4189802d85a4473ba6beb9025fafa862dc84afd2fd20"}}) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dsp\x00', 0x19d9652c329542b4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xc018480b, &(0x7f0000000840)={0x2, 0x200, 0xb658, 0x10000, 0xfffffff7, 0x1}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000880)='/dev/snapshot\x00', 0x12000, 0x0) connect$vsock_dgram(r10, &(0x7f00000008c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000000b00)=[{{&(0x7f0000000900)=@l2, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/7, 0x7}, {&(0x7f00000009c0)=""/243, 0xf3}], 0x2}, 0x8}], 0x1, 0x18051, &(0x7f0000000b80)={r11, r12+10000000}) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SG_SET_RESERVED_SIZE(r13, 0x2275, &(0x7f0000000c00)=0x6) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/ptmx\x00', 0x600000, 0x0) ioctl$TIOCLINUX6(r14, 0x541c, &(0x7f0000000c80)={0x6, 0x81}) 08:30:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x295) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f0000000040)="445968f28e53d669f12c24cf47e9a68e13031e1e"}, 0x20) 08:30:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = fcntl$dupfd(r0, 0x203, r1) bind$isdn(r2, &(0x7f00000000c0)={0x22, 0x3f, 0x3f, 0x40, 0x1f}, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200026833cb0009050112080000000009058c0a08000000000c40c8a32820aaf2f1c0bc93b09135d694d46ab9023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f9f3354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) 08:30:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = getpid() ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={[], 0x400, 0x80, 0x2, 0x1, 0x0, r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r5, &(0x7f00000001c0), 0x0, 0x812dc3d25d9e79e6}, 0x14) 08:30:33 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x53b8e7e63bd37fc8) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000140)=""/4096) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:33 executing program 2 (fault-call:8 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x7}, 0x3c) r1 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "2143e856"}, 0x5, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)={0x9}) 08:30:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x3}, [@call={0x85, 0x10}]}, &(0x7f0000000040)='gPH\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 385.874012][T14731] FAULT_INJECTION: forcing a failure. [ 385.874012][T14731] name failslab, interval 1, probability 0, space 0, times 0 [ 385.887407][T14731] CPU: 1 PID: 14731 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 385.895351][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.905435][T14731] Call Trace: [ 385.908770][T14731] dump_stack+0x191/0x1f0 [ 385.913148][T14731] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.919183][T14731] should_fail+0xa3f/0xa50 [ 385.923631][T14731] __should_failslab+0x264/0x280 [ 385.928598][T14731] should_failslab+0x29/0x70 [ 385.933214][T14731] kmem_cache_alloc_trace+0xf7/0xd20 [ 385.938590][T14731] ? alloc_pipe_info+0xdc/0x8a0 [ 385.943478][T14731] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.949398][T14731] alloc_pipe_info+0xdc/0x8a0 [ 385.954099][T14731] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 385.960090][T14731] splice_direct_to_actor+0xdbd/0x1130 [ 385.965578][T14731] ? do_splice_direct+0x580/0x580 [ 385.970659][T14731] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 385.976875][T14731] ? security_file_permission+0x268/0x6e0 [ 385.982672][T14731] ? rw_verify_area+0x3a5/0x5e0 [ 385.987563][T14731] do_splice_direct+0x342/0x580 [ 385.992459][T14731] do_sendfile+0x1010/0x1d20 [ 385.997101][T14731] __se_sys_sendfile64+0x2bb/0x360 [ 386.002238][T14731] ? syscall_return_slowpath+0x90/0x610 [ 386.007941][T14731] __x64_sys_sendfile64+0x56/0x70 [ 386.013018][T14731] do_syscall_64+0xbc/0xf0 [ 386.017494][T14731] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.023402][T14731] RIP: 0033:0x459a29 [ 386.027324][T14731] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.046949][T14731] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.055393][T14731] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 386.063376][T14731] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 386.071368][T14731] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.079352][T14731] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 386.087346][T14731] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:34 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$inet(0x10, 0x2, 0x30) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x13a}, 0x0) [ 386.172228][ T3353] usb 2-1: new high-speed USB device number 18 using dummy_hcd 08:30:34 executing program 2 (fault-call:8 fault-nth:1): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 386.388234][T14754] FAULT_INJECTION: forcing a failure. [ 386.388234][T14754] name failslab, interval 1, probability 0, space 0, times 0 [ 386.401428][T14754] CPU: 0 PID: 14754 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 386.409363][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.419457][T14754] Call Trace: [ 386.422808][T14754] dump_stack+0x191/0x1f0 [ 386.427163][T14754] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 386.433078][T14754] should_fail+0xa3f/0xa50 [ 386.437526][T14754] __should_failslab+0x264/0x280 [ 386.442486][T14754] should_failslab+0x29/0x70 [ 386.447101][T14754] __kmalloc+0xae/0x430 [ 386.451288][T14754] ? kmsan_internal_set_origin+0x6a/0xb0 [ 386.456938][T14754] ? kcalloc+0x93/0x110 [ 386.461118][T14754] kcalloc+0x93/0x110 [ 386.465134][T14754] alloc_pipe_info+0x56c/0x8a0 [ 386.469927][T14754] splice_direct_to_actor+0xdbd/0x1130 [ 386.475398][T14754] ? do_splice_direct+0x580/0x580 [ 386.480442][T14754] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 386.486547][T14754] ? security_file_permission+0x268/0x6e0 [ 386.492310][T14754] ? rw_verify_area+0x3a5/0x5e0 [ 386.497187][T14754] do_splice_direct+0x342/0x580 [ 386.502101][T14754] do_sendfile+0x1010/0x1d20 [ 386.506758][T14754] __se_sys_sendfile64+0x2bb/0x360 [ 386.511889][T14754] ? syscall_return_slowpath+0x90/0x610 [ 386.517473][T14754] __x64_sys_sendfile64+0x56/0x70 [ 386.522531][T14754] do_syscall_64+0xbc/0xf0 [ 386.526987][T14754] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.532891][T14754] RIP: 0033:0x459a29 [ 386.536805][T14754] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.556435][T14754] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.564880][T14754] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 386.572872][T14754] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 386.580853][T14754] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:30:34 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xa8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000040), &(0x7f0000000080)="60c7a5dc09beed4726ca1b201e921b98169cbfaaf10a434ef3d11f5f12ff"}, 0x20) 08:30:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfff, 0x200280) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 386.588933][T14754] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 386.596915][T14754] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:34 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x4a0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x2, 0x0, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x1, "d6eb2d"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x101}, {0x6, 0x24, 0x1a, 0x9, 0xc6}}, {{0x9, 0x5, 0x81, 0x3, 0x28d, 0x2, 0x7f, 0x22}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x363, 0x80, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1f, 0x0, 0x2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0xebd395c396c8e35a, 0x0, 0x5, 0x0, 0x20, 0x40}, 0x78, &(0x7f0000000280)={0x5, 0xf, 0x78, 0x3, [@ptm_cap={0x3}, @generic={0x66, 0x10, 0xa, "c7f4ab62a9ac7e69a862cb157789566b769bce47297a2615b3e52500942592b69277b05743d347270ed210a68eaa218e83f86423c46f1fc283e3cd0dcfc21cd1e690d4737ac91e95b03b9abf4d8c727be5719a45514b269294d43073c3604f175f6171"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x18, 0x24}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41393c97d3741e5a}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0xac, &(0x7f00000007c0)={0x0, 0xf}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000001880)={0x20, 0x81, 0x2, "e397"}, &(0x7f00000018c0)=ANY=[@ANYBLOB="0200efff0000c9af"], &(0x7f0000001900)={0x20, 0x83, 0x1, "e0"}, &(0x7f0000001940)={0x20, 0x84, 0x1, "8a"}, &(0x7f0000001980)={0x20, 0x85, 0x3, "46aebc"}, &(0x7f00000019c0)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0x40, 0xb, 0x2, '(w'}, &(0x7f0000001b00)={0x40, 0xf, 0x2, 0x8000}, 0x0, &(0x7f0000001b80)={0x40, 0x17, 0x6, @dev={[], 0x10}}, &(0x7f0000001bc0)={0x40, 0x19, 0x2, '4E'}, &(0x7f0000001c00)={0x40, 0x1a, 0x2, 0xfc00}, &(0x7f0000001c40)={0x40, 0x1c, 0x1, 0xef}, &(0x7f0000001c80)={0x40, 0x1e, 0x1, 0x69}, &(0x7f0000001cc0)={0x40, 0x21, 0x1, 0xea}}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)) [ 386.652352][ T3353] usb 2-1: Using ep0 maxpacket: 8 [ 386.803884][ T3353] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 386.812466][ T3353] usb 2-1: config 0 has no interface number 0 [ 386.818703][ T3353] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 386.828581][ T3353] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 386.838490][ T3353] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 386.847667][ T3353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.858898][ T3353] usb 2-1: config 0 descriptor?? [ 387.032216][ T12] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 387.116392][T13799] usb 2-1: USB disconnect, device number 18 [ 387.282222][ T12] usb 6-1: Using ep0 maxpacket: 16 [ 387.492323][ T12] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 867 [ 387.502494][ T12] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 387.892161][ T3353] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 388.092349][ T12] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.101550][ T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.109766][ T12] usb 6-1: SerialNumber: syz [ 388.115670][ T12] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 388.124778][ T12] usb 6-1: no configuration chosen from 1 choice [ 388.162216][ T3353] usb 2-1: Using ep0 maxpacket: 8 [ 388.292430][ T3353] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 388.300576][ T3353] usb 2-1: config 0 has no interface number 0 [ 388.306882][ T3353] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 388.316754][ T3353] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 388.326646][ T3353] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 388.336269][ T3353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.345670][ T3353] usb 2-1: config 0 descriptor?? [ 388.584019][T13799] usb 2-1: USB disconnect, device number 19 08:30:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) 08:30:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(0xffffffffffffffff) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0xfff, &(0x7f0000000100)=0x2) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KDMKTONE(r7, 0x4b30, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10000068c) 08:30:36 executing program 2 (fault-call:8 fault-nth:2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x110, r3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0x9}], 0x1c) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:36 executing program 1: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e07b837b3773e81fea63a70558ce51b1d600aba1047da60b68a712946a6872c285a2c4ff7f08d62504e6389fa9c37de47d3a532ff05a9815c89fd30a5a2fb55f9275072a022528992fda3aeefb8a1a3d55b93f4d2c2926c3d41f2b8c18fac2f2ec21841cf415f9879cc2fdd27ae9a847ef7f2e67b8ef6d42de0191fcca0dffa1b2ec621c06f5988b834d160247af023b981af9eed23505d273761624df4e365c1f7a17592a7b944823dffb505b8bd2b646c6269f0777f37392ac6bc23a797610bf05d2cf2b", 0xc5, r0) keyctl$get_keyring_id(0x0, r1, 0x9) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}, @mdlm={0x15}]}}}]}}]}}, 0x0) [ 388.769401][T14790] FAULT_INJECTION: forcing a failure. [ 388.769401][T14790] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 388.782957][T14790] CPU: 1 PID: 14790 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 388.790889][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.800974][T14790] Call Trace: [ 388.804332][T14790] dump_stack+0x191/0x1f0 [ 388.808722][T14790] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 388.814669][T14790] should_fail+0xa3f/0xa50 [ 388.819229][T14790] should_fail_alloc_page+0x1fb/0x270 [ 388.824652][T14790] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 388.830155][T14790] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.836345][T14790] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 388.842577][T14790] ? update_stack_state+0xa12/0xb40 [ 388.847806][T14790] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 388.853940][T14790] ? __module_address+0x68/0x5e0 [ 388.858927][T14790] ? is_bpf_text_address+0x3c5/0x4b0 [ 388.864235][T14790] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 388.870333][T14790] ? is_bpf_text_address+0x47d/0x4b0 [ 388.875670][T14790] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 388.882295][T14790] alloc_pages_current+0x68d/0x9a0 [ 388.887511][T14790] __page_cache_alloc+0x95/0x320 [ 388.892474][T14790] __do_page_cache_readahead+0x46e/0x990 [ 388.898147][T14790] ondemand_readahead+0xdc5/0x13d0 [ 388.903286][T14790] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 388.909473][T14790] page_cache_sync_readahead+0x38f/0x8a0 [ 388.915141][T14790] generic_file_read_iter+0x998/0x3e70 [ 388.920659][T14790] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 388.926622][T14790] blkdev_read_iter+0x20d/0x270 [ 388.931506][T14790] ? blkdev_write_iter+0x650/0x650 [ 388.936651][T14790] generic_file_splice_read+0x730/0xac0 [ 388.942259][T14790] ? splice_shrink_spd+0x100/0x100 [ 388.947426][T14790] splice_direct_to_actor+0x587/0x1130 [ 388.952917][T14790] ? do_splice_direct+0x580/0x580 [ 388.957995][T14790] do_splice_direct+0x342/0x580 [ 388.962915][T14790] do_sendfile+0x1010/0x1d20 [ 388.967596][T14790] __se_sys_sendfile64+0x2bb/0x360 [ 388.972752][T14790] ? syscall_return_slowpath+0x90/0x610 [ 388.978331][T14790] __x64_sys_sendfile64+0x56/0x70 [ 388.983377][T14790] do_syscall_64+0xbc/0xf0 [ 388.987823][T14790] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.993730][T14790] RIP: 0033:0x459a29 [ 388.997653][T14790] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.017510][T14790] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.025958][T14790] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 389.033955][T14790] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 389.041949][T14790] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.049939][T14790] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 389.057923][T14790] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x408080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x2, 0x40, 0x618}) 08:30:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000080)={0x5, @sdr={0x1818a0a1}}) truncate(&(0x7f0000000040)='./file0\x00', 0x7) 08:30:37 executing program 2 (fault-call:8 fault-nth:3): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000001eaffffff6b7c259a0000000000"]) ioctl$KVM_SET_LAPIC(r7, 0xc080aebe, &(0x7f0000000180)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fcd2a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000580)={r11, 0x7f, 0x30}, &(0x7f00000005c0)=0xc) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="f3817600e5240f75b8545a6176000fc7ad9d3566f20f07660f3880b4030066b9351001c00f320fc75f5a66b9650a00000f32", 0x32}], 0x1, 0x2, &(0x7f0000000240)=[@cstype0={0x4, 0x1}], 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r14, 0xc0206434, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000180)={0x4, r15, 0x1, 0x6}) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r16, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='trustedem1\x00', 0xb, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 389.380542][T14814] FAULT_INJECTION: forcing a failure. [ 389.380542][T14814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.395372][T14814] CPU: 1 PID: 14814 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 389.403323][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.413456][T14814] Call Trace: [ 389.416832][T14814] dump_stack+0x191/0x1f0 [ 389.421245][T14814] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 389.427231][T14814] should_fail+0xa3f/0xa50 [ 389.431808][T14814] should_fail_alloc_page+0x1fb/0x270 [ 389.437241][T14814] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 389.442761][T14814] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.448867][T14814] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 389.455054][T14814] ? update_stack_state+0xa12/0xb40 [ 389.460285][T14814] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 389.466371][T14814] ? __module_address+0x68/0x5e0 [ 389.471341][T14814] ? is_bpf_text_address+0x3c5/0x4b0 [ 389.476664][T14814] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 389.482767][T14814] ? is_bpf_text_address+0x47d/0x4b0 [ 389.488114][T14814] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 389.494047][T14814] alloc_pages_current+0x68d/0x9a0 [ 389.499208][T14814] __page_cache_alloc+0x95/0x320 [ 389.504175][T14814] __do_page_cache_readahead+0x46e/0x990 [ 389.509864][T14814] ondemand_readahead+0xdc5/0x13d0 [ 389.515005][T14814] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 389.521187][T14814] page_cache_sync_readahead+0x38f/0x8a0 [ 389.526855][T14814] generic_file_read_iter+0x998/0x3e70 [ 389.532374][T14814] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 389.538291][T14814] blkdev_read_iter+0x20d/0x270 [ 389.543163][T14814] ? blkdev_write_iter+0x650/0x650 [ 389.548292][T14814] generic_file_splice_read+0x730/0xac0 [ 389.553879][T14814] ? splice_shrink_spd+0x100/0x100 [ 389.559008][T14814] splice_direct_to_actor+0x587/0x1130 [ 389.564484][T14814] ? do_splice_direct+0x580/0x580 [ 389.569558][T14814] do_splice_direct+0x342/0x580 [ 389.574452][T14814] do_sendfile+0x1010/0x1d20 [ 389.579094][T14814] __se_sys_sendfile64+0x2bb/0x360 [ 389.584226][T14814] ? syscall_return_slowpath+0x90/0x610 [ 389.589801][T14814] __x64_sys_sendfile64+0x56/0x70 [ 389.594838][T14814] do_syscall_64+0xbc/0xf0 [ 389.599288][T14814] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.605192][T14814] RIP: 0033:0x459a29 [ 389.609109][T14814] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.628728][T14814] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.637159][T14814] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 389.645143][T14814] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 389.653125][T14814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.661194][T14814] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 389.669177][T14814] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) 08:30:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) prctl$PR_GET_DUMPABLE(0x3) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r2, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 389.683544][T13799] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 389.874746][T14817] debugfs: Directory 'vcpu0' with parent '14817-6' already present! [ 390.042407][T13799] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 08:30:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$eventfd(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0cd546"], 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x202000, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, 0x0}}], 0x1, 0x0) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r4, r0) 08:30:38 executing program 2 (fault-call:8 fault-nth:4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x22, 0x4, 0x1, 0x10, 0xffffffffffffffff, 0x3, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup2(0xffffffffffffffff, r1) 08:30:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0xc0003) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 390.185350][ T4032] usb 6-1: USB disconnect, device number 8 [ 390.224588][T13799] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.233997][T13799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.242149][T13799] usb 2-1: Product: syz [ 390.246392][T13799] usb 2-1: Manufacturer: syz [ 390.251075][T13799] usb 2-1: SerialNumber: syz 08:30:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'hwsim0\x00', 0x200}) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 390.294380][T14835] FAULT_INJECTION: forcing a failure. [ 390.294380][T14835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 390.307769][T14835] CPU: 1 PID: 14835 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 390.315697][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.325795][T14835] Call Trace: [ 390.329155][T14835] dump_stack+0x191/0x1f0 [ 390.333556][T14835] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 390.339515][T14835] should_fail+0xa3f/0xa50 [ 390.343993][T14835] should_fail_alloc_page+0x1fb/0x270 [ 390.349388][T14835] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 390.354898][T14835] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.360986][T14835] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 390.367157][T14835] ? update_stack_state+0xa12/0xb40 [ 390.372383][T14835] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 390.378478][T14835] ? __module_address+0x68/0x5e0 [ 390.383454][T14835] ? is_bpf_text_address+0x3c5/0x4b0 [ 390.388759][T14835] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 390.394847][T14835] ? is_bpf_text_address+0x47d/0x4b0 [ 390.400185][T14835] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 390.406099][T14835] alloc_pages_current+0x68d/0x9a0 [ 390.411256][T14835] __page_cache_alloc+0x95/0x320 [ 390.416225][T14835] __do_page_cache_readahead+0x46e/0x990 [ 390.421910][T14835] ondemand_readahead+0xdc5/0x13d0 [ 390.427047][T14835] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 390.433233][T14835] page_cache_sync_readahead+0x38f/0x8a0 [ 390.438904][T14835] generic_file_read_iter+0x998/0x3e70 [ 390.444422][T14835] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 390.450340][T14835] blkdev_read_iter+0x20d/0x270 [ 390.455212][T14835] ? blkdev_write_iter+0x650/0x650 [ 390.460339][T14835] generic_file_splice_read+0x730/0xac0 [ 390.465924][T14835] ? splice_shrink_spd+0x100/0x100 [ 390.471051][T14835] splice_direct_to_actor+0x587/0x1130 [ 390.477220][T14835] ? do_splice_direct+0x580/0x580 [ 390.482382][T14835] do_splice_direct+0x342/0x580 [ 390.487282][T14835] do_sendfile+0x1010/0x1d20 [ 390.491927][T14835] __se_sys_sendfile64+0x2bb/0x360 [ 390.497058][T14835] ? syscall_return_slowpath+0x90/0x610 [ 390.502650][T14835] __x64_sys_sendfile64+0x56/0x70 [ 390.507692][T14835] do_syscall_64+0xbc/0xf0 [ 390.512134][T14835] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 390.518045][T14835] RIP: 0033:0x459a29 [ 390.522055][T14835] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.541690][T14835] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 390.550150][T14835] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 390.558141][T14835] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 390.566213][T14835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 390.574196][T14835] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 390.582190][T14835] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 [ 390.644331][T13799] usb 2-1: bad CDC descriptors [ 390.837885][ T5] usb 2-1: USB disconnect, device number 20 [ 391.622127][ T4032] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 391.982285][ T4032] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 392.152388][ T4032] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.161511][ T4032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.169707][ T4032] usb 2-1: Product: syz [ 392.174010][ T4032] usb 2-1: Manufacturer: syz [ 392.178693][ T4032] usb 2-1: SerialNumber: syz [ 392.234088][ T4032] usb 2-1: bad CDC descriptors 08:30:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x4000043, 0x0) 08:30:40 executing program 2 (fault-call:8 fault-nth:5): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:40 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x40a, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x1c, 0x18, {0xe11, @bearer=@l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40048019}, 0x9190) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f0000000140)="d5f70cfe45dae8bba9c8a6707311782b4e0ce6c2cb80b3cfc934877053fe3c203aba642007987b30e40641872d3edefe68162d979278b3a1f157b1ec84b41c42f942ead15c4b14032f0eed31c03dafe1508a0a1a0702c30000", 0x0}, 0xe) 08:30:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$eventfd(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0cd546"], 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x202000, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, 0x0}}], 0x1, 0x0) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) dup2(r4, r0) 08:30:40 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x40000) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x14, r4, 0x84c712fe4e0d10f5}, 0x14}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @dev}, &(0x7f0000000200)=0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) r16 = socket(0x10, 0x3, 0x0) write(r16, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockname$packet(r16, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r18 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r18, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) r20 = socket(0x10, 0x3, 0x0) write(r20, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) r22 = socket(0x10, 0x3, 0x0) write(r22, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r22, 0x0, 0x10, &(0x7f0000000740)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r27, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r24, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r27, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'vcan0\x00', r27}) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$netlink(0x10, 0x3, 0x0) r31 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r30, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r32, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r34, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r36, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r33, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r37 = socket$nl_route(0x10, 0x3, 0x0) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r39, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r39, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r38, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r40, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r37, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r40, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000c00)={@local, @loopback, 0x0}, &(0x7f0000000c40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005200)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000005300)=0xe8) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket$netlink(0x10, 0x3, 0x0) r46 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r46, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r46, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r45, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r47, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r44, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r47, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r48 = socket$nl_route(0x10, 0x3, 0x0) r49 = socket$netlink(0x10, 0x3, 0x0) r50 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r50, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r50, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r49, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r51, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r48, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r51, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r52 = socket$nl_route(0x10, 0x3, 0x0) r53 = socket$netlink(0x10, 0x3, 0x0) r54 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r54, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r54, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r53, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r55, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r52, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r55, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000005c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005bc0)={&(0x7f0000005340)={0x860, r4, 0xafe978f876cc3c72, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x15c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xe1, 0x7f, 0x5, 0x4}, {0x1, 0x3, 0x4, 0x6}, {0x5, 0x7f, 0x7, 0x5}, {0xff, 0x3f, 0x4, 0xaa}, {0xfff, 0xff, 0xfb, 0xffff}, {0x2, 0x0, 0x2, 0x3ff}]}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r23}, {0x134, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x8, 0x8, 0x0, 0x80000000}, {0x6, 0x3, 0x0, 0x1f}, {0x4, 0x81, 0x13, 0x1}, {0x7, 0x8f, 0x66, 0x40000000}, {0x6, 0x7f, 0x1, 0x8}, {0x5, 0x5, 0x1, 0x5a}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r32}, {0x21c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r36}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r40}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r41}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x57}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r43}, {0x154, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x3f, 0x5, 0x80, 0x7}, {0x5, 0x2, 0xd4, 0xffffffff}, {0xcb, 0x1, 0x0, 0xfffffff9}, {0x5, 0x6, 0x4, 0xfff}, {0xbdd, 0x4, 0xec, 0x374800}, {0x18c1, 0x7, 0x7, 0xfffffff5}, {0xfffb, 0x81, 0x8, 0x7}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x20, 0x7, 0x3f, 0x9}, {0x7f, 0x6, 0x7, 0x1000}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x3, 0x2, 0x5, 0x2}, {0x401, 0x3, 0x6, 0x3}, {0x9, 0x4, 0xb, 0x80}, {0x8, 0x80, 0x1f, 0x6}, {0x6, 0x4, 0xf7, 0x148}, {0x6, 0x9, 0x1, 0x6cd}]}}}]}}, {{0x8, 0x1, r47}, {0x160, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r51}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x100, 0x3, 0x6, 0x8}, {0x0, 0xfd, 0x5, 0x4}, {0xfc00, 0x5, 0x20, 0x2}, {0x7ff, 0x1, 0x1, 0x80}, {0x6, 0x5, 0x7f, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r55}}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4000000}, 0x4a041) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) prctl$PR_GET_FP_MODE(0x2e) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 392.367602][ T4032] usb 2-1: USB disconnect, device number 21 [ 392.453437][T14859] FAULT_INJECTION: forcing a failure. [ 392.453437][T14859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 392.467182][T14859] CPU: 0 PID: 14859 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 392.475258][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.485378][T14859] Call Trace: [ 392.488750][T14859] dump_stack+0x191/0x1f0 [ 392.493156][T14859] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 392.499110][T14859] should_fail+0xa3f/0xa50 [ 392.503580][T14859] should_fail_alloc_page+0x1fb/0x270 [ 392.508979][T14859] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 392.515197][T14859] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.521309][T14859] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 392.527485][T14859] ? update_stack_state+0xa12/0xb40 [ 392.532824][T14859] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 392.538922][T14859] ? __module_address+0x68/0x5e0 [ 392.544318][T14859] ? is_bpf_text_address+0x3c5/0x4b0 [ 392.549631][T14859] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 392.555720][T14859] ? is_bpf_text_address+0x47d/0x4b0 [ 392.561158][T14859] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 392.567177][T14859] alloc_pages_current+0x68d/0x9a0 [ 392.572329][T14859] __page_cache_alloc+0x95/0x320 [ 392.577297][T14859] __do_page_cache_readahead+0x46e/0x990 [ 392.582973][T14859] ondemand_readahead+0xdc5/0x13d0 [ 392.588111][T14859] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 392.594311][T14859] page_cache_sync_readahead+0x38f/0x8a0 [ 392.599979][T14859] generic_file_read_iter+0x998/0x3e70 [ 392.605684][T14859] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 392.611600][T14859] blkdev_read_iter+0x20d/0x270 [ 392.616471][T14859] ? blkdev_write_iter+0x650/0x650 [ 392.621598][T14859] generic_file_splice_read+0x730/0xac0 [ 392.627178][T14859] ? splice_shrink_spd+0x100/0x100 [ 392.632391][T14859] splice_direct_to_actor+0x587/0x1130 [ 392.637884][T14859] ? do_splice_direct+0x580/0x580 [ 392.642960][T14859] do_splice_direct+0x342/0x580 [ 392.647852][T14859] do_sendfile+0x1010/0x1d20 [ 392.652490][T14859] __se_sys_sendfile64+0x2bb/0x360 [ 392.657622][T14859] ? syscall_return_slowpath+0x90/0x610 [ 392.663207][T14859] __x64_sys_sendfile64+0x56/0x70 [ 392.668246][T14859] do_syscall_64+0xbc/0xf0 [ 392.672691][T14859] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 392.678592][T14859] RIP: 0033:0x459a29 [ 392.682507][T14859] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 392.702126][T14859] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 392.710561][T14859] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 392.718540][T14859] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 392.726531][T14859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 392.734526][T14859] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 392.743165][T14859] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140)="bd29b6099d5e19d76b8793c25a0bb91ba249497726bdd46bd13cd6549b3a66a66a11865fc4661fc08002af22cbeaa3cce0e269b099a1c24d6e6e5e6ea88348cfca", &(0x7f00000000c0)="71b86d7aa827de2f2100000000000000008ed628c2b2ff1165b1cc1321f48eb860015a6bac085598bcfcd6d42f98fbeb11bad07a0b7749ca53f0fae0c5569be4a3b8c04f25c4", 0x6}, 0xffffffffffffff21) 08:30:40 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/236, 0xec}], 0x1, 0x4) 08:30:40 executing program 2 (fault-call:8 fault-nth:6): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$capi20(r2, &(0x7f0000000000)={0x10, 0x5, 0xff, 0x82, 0x5, 0x8}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x1, 0x0, r2, 0x402, [], r3, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x3c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r4, &(0x7f00000001c0), 0x0}, 0x20) [ 393.066973][T14886] FAULT_INJECTION: forcing a failure. [ 393.066973][T14886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.080824][T14886] CPU: 1 PID: 14886 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 393.088751][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.098817][T14886] Call Trace: [ 393.102145][T14886] dump_stack+0x191/0x1f0 [ 393.106501][T14886] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.112429][T14886] should_fail+0xa3f/0xa50 [ 393.116878][T14886] should_fail_alloc_page+0x1fb/0x270 [ 393.122283][T14886] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 393.127766][T14886] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.133856][T14886] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 393.140024][T14886] ? update_stack_state+0xa12/0xb40 [ 393.145256][T14886] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 393.151338][T14886] ? __module_address+0x68/0x5e0 [ 393.156305][T14886] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.162979][T14886] ? __update_load_avg_cfs_rq+0x106/0x1270 [ 393.168840][T14886] ? __update_load_avg_se+0x738/0x1220 [ 393.174412][T14886] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.180366][T14886] alloc_pages_current+0x68d/0x9a0 [ 393.185538][T14886] __page_cache_alloc+0x95/0x320 [ 393.190590][T14886] __do_page_cache_readahead+0x46e/0x990 [ 393.196270][T14886] ondemand_readahead+0xdc5/0x13d0 [ 393.201425][T14886] page_cache_sync_readahead+0x38f/0x8a0 [ 393.207098][T14886] generic_file_read_iter+0x998/0x3e70 [ 393.212614][T14886] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.218534][T14886] blkdev_read_iter+0x20d/0x270 [ 393.223419][T14886] ? blkdev_write_iter+0x650/0x650 [ 393.228555][T14886] generic_file_splice_read+0x730/0xac0 [ 393.234138][T14886] ? splice_shrink_spd+0x100/0x100 [ 393.239272][T14886] splice_direct_to_actor+0x587/0x1130 [ 393.244762][T14886] ? do_splice_direct+0x580/0x580 [ 393.249828][T14886] do_splice_direct+0x342/0x580 [ 393.254723][T14886] do_sendfile+0x1010/0x1d20 [ 393.259364][T14886] __se_sys_sendfile64+0x2bb/0x360 [ 393.264499][T14886] ? syscall_return_slowpath+0x90/0x610 [ 393.270086][T14886] __x64_sys_sendfile64+0x56/0x70 [ 393.275135][T14886] do_syscall_64+0xbc/0xf0 [ 393.279584][T14886] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.285488][T14886] RIP: 0033:0x459a29 [ 393.289417][T14886] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.309045][T14886] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 08:30:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) [ 393.317487][T14886] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 393.325467][T14886] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 393.333451][T14886] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 393.341435][T14886] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 393.349417][T14886] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:41 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400, 0x0) read$eventfd(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x448bc2) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000300)=0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20, 0x0) r3 = socket(0x200000000000011, 0x800, 0x0) bind$packet(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000094189137367e9e7de300815b5e0d19101fb850558aecf2368523bff6ece58f7e0a8869be4d96b55adc009493eeebc004", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001300)={r5, 0x0, 0x0, 0x0, 0x218, 0xba}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0x7}, 0x8) r7 = socket$inet6(0xa, 0x3, 0x20000000021) prctl$PR_CAPBSET_DROP(0x18, 0x0) r8 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x104300) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000240)) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) r9 = socket(0x11, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$packet_int(r9, 0x107, 0x7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bcsh0\x00', 0x10) r10 = socket(0x2, 0x65ed603475a7f725, 0x85) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0xb, 0x0, &(0x7f00000002c0)) bind$packet(r10, &(0x7f0000000080)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @remote}, 0x39f) connect$inet6(r7, &(0x7f0000000040)={0xa, 0xfeff, 0x0, @local, 0xc}, 0x1c) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$eventfd(r11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000340)={r6, 0xf7b}, &(0x7f0000000380)=0x8) sendto$inet6(r7, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 08:30:41 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x22, 0x4, 0x1, 0x20, 0xffffffffffffffff, 0x0, [], 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) unshare(0x2000400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @local}, 0x1c) 08:30:41 executing program 2 (fault-call:8 fault-nth:7): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x8001, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r4, &(0x7f0000002480)=""/4096, 0x12fe) 08:30:41 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x46a2e05e969db0f8, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x4000000000000, 0x74, 0x401, 0x8}) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xffffffffffff8000, 0x101000) timerfd_gettime(r2, &(0x7f0000000140)) [ 393.817086][T14915] FAULT_INJECTION: forcing a failure. [ 393.817086][T14915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.830631][T14915] CPU: 1 PID: 14915 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 393.838571][T14915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.848677][T14915] Call Trace: [ 393.852053][T14915] dump_stack+0x191/0x1f0 [ 393.856456][T14915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.862425][T14915] should_fail+0xa3f/0xa50 [ 393.866926][T14915] should_fail_alloc_page+0x1fb/0x270 [ 393.872370][T14915] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 393.877896][T14915] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.884029][T14915] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 393.890250][T14915] ? update_stack_state+0xa12/0xb40 [ 393.895715][T14915] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 393.901853][T14915] ? __module_address+0x68/0x5e0 [ 393.906876][T14915] ? is_bpf_text_address+0x3c5/0x4b0 08:30:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 393.912250][T14915] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 393.918415][T14915] ? is_bpf_text_address+0x47d/0x4b0 [ 393.923809][T14915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.929783][T14915] alloc_pages_current+0x68d/0x9a0 [ 393.934986][T14915] __page_cache_alloc+0x95/0x320 [ 393.940005][T14915] __do_page_cache_readahead+0x46e/0x990 [ 393.945742][T14915] ondemand_readahead+0xdc5/0x13d0 [ 393.950939][T14915] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 393.957169][T14915] page_cache_sync_readahead+0x38f/0x8a0 [ 393.962845][T14915] generic_file_read_iter+0x998/0x3e70 [ 393.968402][T14915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 393.974353][T14915] blkdev_read_iter+0x20d/0x270 [ 393.979254][T14915] ? blkdev_write_iter+0x650/0x650 [ 393.984397][T14915] generic_file_splice_read+0x730/0xac0 [ 393.989989][T14915] ? splice_shrink_spd+0x100/0x100 [ 393.995256][T14915] splice_direct_to_actor+0x587/0x1130 [ 394.000753][T14915] ? do_splice_direct+0x580/0x580 [ 394.005825][T14915] do_splice_direct+0x342/0x580 [ 394.010721][T14915] do_sendfile+0x1010/0x1d20 [ 394.015366][T14915] __se_sys_sendfile64+0x2bb/0x360 [ 394.020504][T14915] ? syscall_return_slowpath+0x90/0x610 [ 394.026078][T14915] __x64_sys_sendfile64+0x56/0x70 [ 394.031118][T14915] do_syscall_64+0xbc/0xf0 [ 394.035565][T14915] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.041470][T14915] RIP: 0033:0x459a29 [ 394.045386][T14915] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 394.065004][T14915] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 394.073446][T14915] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 394.081773][T14915] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 394.089757][T14915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 394.097757][T14915] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 394.105745][T14915] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:42 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = dup(r2) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:42 executing program 5: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x806) syz_open_dev$binder(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) prctl$PR_GET_ENDIAN(0x13, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x81002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:30:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r6, r0, 0xb}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:42 executing program 2 (fault-call:8 fault-nth:8): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 394.465225][T14945] FAULT_INJECTION: forcing a failure. [ 394.465225][T14945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.479255][T14945] CPU: 0 PID: 14945 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 394.487196][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.497301][T14945] Call Trace: [ 394.500650][T14945] dump_stack+0x191/0x1f0 [ 394.505052][T14945] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 394.510999][T14945] should_fail+0xa3f/0xa50 [ 394.515462][T14945] should_fail_alloc_page+0x1fb/0x270 [ 394.520869][T14945] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 394.526382][T14945] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.532497][T14945] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 394.538684][T14945] ? update_stack_state+0xa12/0xb40 [ 394.543921][T14945] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.550011][T14945] ? __module_address+0x68/0x5e0 [ 394.554981][T14945] ? is_bpf_text_address+0x3c5/0x4b0 [ 394.560303][T14945] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 394.566405][T14945] ? is_bpf_text_address+0x47d/0x4b0 [ 394.571739][T14945] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 394.577659][T14945] alloc_pages_current+0x68d/0x9a0 [ 394.582843][T14945] __page_cache_alloc+0x95/0x320 [ 394.587827][T14945] __do_page_cache_readahead+0x46e/0x990 [ 394.593873][T14945] ondemand_readahead+0xdc5/0x13d0 [ 394.599017][T14945] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 394.605205][T14945] page_cache_sync_readahead+0x38f/0x8a0 [ 394.610876][T14945] generic_file_read_iter+0x998/0x3e70 [ 394.616411][T14945] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 394.622332][T14945] blkdev_read_iter+0x20d/0x270 [ 394.627206][T14945] ? blkdev_write_iter+0x650/0x650 [ 394.632338][T14945] generic_file_splice_read+0x730/0xac0 [ 394.637923][T14945] ? splice_shrink_spd+0x100/0x100 [ 394.643052][T14945] splice_direct_to_actor+0x587/0x1130 [ 394.648533][T14945] ? do_splice_direct+0x580/0x580 [ 394.653605][T14945] do_splice_direct+0x342/0x580 [ 394.658516][T14945] do_sendfile+0x1010/0x1d20 [ 394.663168][T14945] __se_sys_sendfile64+0x2bb/0x360 [ 394.668304][T14945] ? syscall_return_slowpath+0x90/0x610 [ 394.673879][T14945] __x64_sys_sendfile64+0x56/0x70 [ 394.678920][T14945] do_syscall_64+0xbc/0xf0 [ 394.683365][T14945] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.689267][T14945] RIP: 0033:0x459a29 [ 394.693181][T14945] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 394.712905][T14945] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 394.721387][T14945] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 394.729385][T14945] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 394.737375][T14945] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 394.745363][T14945] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 394.753352][T14945] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000280)="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"}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, [], [{0x7ff, 0x400, 0x100000000, 0xfffffffffffffff9, 0x40, 0x8}, {0x3, 0x401, 0x7fffffff, 0x2, 0x3, 0x9}], [[], []]}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 394.773605][T14952] debugfs: File '14942' in directory 'proc' already present! 08:30:42 executing program 2 (fault-call:8 fault-nth:9): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x1f, 0xfffffffe, 0x100}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) personality(0x10000e) [ 395.006912][T14970] FAULT_INJECTION: forcing a failure. [ 395.006912][T14970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.020541][T14970] CPU: 1 PID: 14970 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 395.028483][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.038590][T14970] Call Trace: [ 395.041962][T14970] dump_stack+0x191/0x1f0 [ 395.046369][T14970] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.052336][T14970] should_fail+0xa3f/0xa50 [ 395.056836][T14970] should_fail_alloc_page+0x1fb/0x270 [ 395.062280][T14970] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 395.067819][T14970] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.073787][T14970] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 395.079997][T14970] ? update_load_avg+0x1f42/0x2610 [ 395.085239][T14970] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.091211][T14970] alloc_pages_current+0x68d/0x9a0 [ 395.096418][T14970] __page_cache_alloc+0x95/0x320 [ 395.101432][T14970] __do_page_cache_readahead+0x46e/0x990 [ 395.107172][T14970] ondemand_readahead+0xdc5/0x13d0 [ 395.112384][T14970] page_cache_sync_readahead+0x38f/0x8a0 [ 395.118113][T14970] generic_file_read_iter+0x998/0x3e70 [ 395.123698][T14970] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.129666][T14970] blkdev_read_iter+0x20d/0x270 [ 395.134593][T14970] ? blkdev_write_iter+0x650/0x650 [ 395.139769][T14970] generic_file_splice_read+0x730/0xac0 [ 395.145399][T14970] ? splice_shrink_spd+0x100/0x100 [ 395.150596][T14970] splice_direct_to_actor+0x587/0x1130 [ 395.156114][T14970] ? do_splice_direct+0x580/0x580 [ 395.161233][T14970] do_splice_direct+0x342/0x580 [ 395.166325][T14970] do_sendfile+0x1010/0x1d20 [ 395.171034][T14970] __se_sys_sendfile64+0x2bb/0x360 [ 395.176223][T14970] ? syscall_return_slowpath+0x90/0x610 [ 395.181858][T14970] __x64_sys_sendfile64+0x56/0x70 [ 395.186952][T14970] do_syscall_64+0xbc/0xf0 [ 395.191443][T14970] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.197380][T14970] RIP: 0033:0x459a29 [ 395.201947][T14970] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.221601][T14970] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 395.230078][T14970] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 395.238109][T14970] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 395.246129][T14970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 08:30:43 executing program 1: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x804) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 395.254160][T14970] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 395.262185][T14970] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") semget$private(0x0, 0x3, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r8 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)) dup3(r7, r8, 0x0) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000000640)=""/4096) r9 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f00000000c0)={{0x27, 0x9, 0xff, 0x1}, 'syz0\x00', 0x45}) 08:30:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) munmap(&(0x7f0000008000/0x2000)=nil, 0x2000) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 395.385882][T14983] debugfs: File '14942' in directory 'proc' already present! [ 395.425089][T14989] debugfs: File '14979' in directory 'proc' already present! 08:30:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) prctl$PR_GET_TIMERSLACK(0x1e) 08:30:43 executing program 2 (fault-call:8 fault-nth:10): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 395.555457][T14996] mmap: syz-executor.4 (14996) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 08:30:43 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x80, 0x14, [0x6, 0x7, 0x6, 0x8, 0x6]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:43 executing program 5: socket$inet(0x2, 0x3, 0x0) syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x804) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x81002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfe}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 395.724543][T15003] FAULT_INJECTION: forcing a failure. [ 395.724543][T15003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.738371][T15003] CPU: 1 PID: 15003 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 395.746490][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.756576][T15003] Call Trace: [ 395.759991][T15003] dump_stack+0x191/0x1f0 [ 395.764350][T15003] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.770276][T15003] should_fail+0xa3f/0xa50 [ 395.774725][T15003] should_fail_alloc_page+0x1fb/0x270 [ 395.780127][T15003] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 395.785610][T15003] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.791696][T15003] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 395.797870][T15003] ? update_stack_state+0xa12/0xb40 [ 395.803094][T15003] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 395.809175][T15003] ? __module_address+0x68/0x5e0 [ 395.814136][T15003] ? is_bpf_text_address+0x3c5/0x4b0 [ 395.819445][T15003] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 395.825538][T15003] ? is_bpf_text_address+0x47d/0x4b0 [ 395.830874][T15003] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.836800][T15003] alloc_pages_current+0x68d/0x9a0 [ 395.841943][T15003] __page_cache_alloc+0x95/0x320 [ 395.846910][T15003] __do_page_cache_readahead+0x46e/0x990 [ 395.852587][T15003] ondemand_readahead+0xdc5/0x13d0 [ 395.857723][T15003] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 395.863923][T15003] page_cache_sync_readahead+0x38f/0x8a0 [ 395.869598][T15003] generic_file_read_iter+0x998/0x3e70 [ 395.875117][T15003] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 395.881041][T15003] blkdev_read_iter+0x20d/0x270 [ 395.885916][T15003] ? blkdev_write_iter+0x650/0x650 [ 395.891041][T15003] generic_file_splice_read+0x730/0xac0 [ 395.896623][T15003] ? splice_shrink_spd+0x100/0x100 [ 395.901749][T15003] splice_direct_to_actor+0x587/0x1130 [ 395.907218][T15003] ? do_splice_direct+0x580/0x580 [ 395.912289][T15003] do_splice_direct+0x342/0x580 [ 395.917182][T15003] do_sendfile+0x1010/0x1d20 [ 395.921836][T15003] __se_sys_sendfile64+0x2bb/0x360 [ 395.926973][T15003] ? syscall_return_slowpath+0x90/0x610 [ 395.932553][T15003] __x64_sys_sendfile64+0x56/0x70 [ 395.937607][T15003] do_syscall_64+0xbc/0xf0 [ 395.942318][T15003] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.948252][T15003] RIP: 0033:0x459a29 [ 395.952196][T15003] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 395.971828][T15003] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 395.980398][T15003] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 395.988398][T15003] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 395.996483][T15003] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.004469][T15003] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 396.012580][T15003] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x0) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 08:30:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000040)}, 0x20) 08:30:44 executing program 2 (fault-call:8 fault-nth:11): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 396.188839][T15022] debugfs: File '15014' in directory 'proc' already present! [ 396.223521][T15024] debugfs: File '14979' in directory 'proc' already present! 08:30:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x80000000000, 0x100) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r4, 0x808200) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1000}) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8000fffffffa) 08:30:44 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000002f97d9db60000000", @ANYRES32=r6, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) sendmsg$xdp(r2, &(0x7f0000002340)={&(0x7f0000000080)={0x2c, 0x1, r6, 0x34}, 0x10, &(0x7f00000022c0)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="5ff67a6e02c3ce49b7e86e6d3c22bdf9c0e750981abee52f588cb9c3d7e970f36c0219c8c29e5452e52d5c6ba41e17cfe88691c5608fa6b6a4a0cfc8013b974e1216fe3a515d8c790f0e6bedd301fb906e3060187eeb072de8d9c004f47f390bdf30eb9c5fc362b6769c9f16fc9701d7509c23fc9a8b6c0bf8aee929d8e18557d443bd0f1f3396522a79a381ddd93deebbe0202b63c5e354fdefa126ceabfc2a6522b4fb92ae4520d4b40acd302c638c05f51c820095127b821da4ea6a76073e518405942b2f9fdf8cc0d28422849ba98f59fda4386ce4550a897c348872f1fb3a52f93587b1f0fdc0de7cc88fc4faa73eedd68f87f716aadbece2d43f578cdd7415ab430000db7267d20f250023f98a2351a8c0b3cdb780d6b575ac2b9bd667713d49338e6ff719f4dd3645bfaccfd62c48fa10f776c0efae134eca4e567340b4ec1fba15fdd6c73886b96e0df1a39017b6bd044a38fc28045c6fb6529ab2b008229feddf3f40d1b631c4e61258843d096c4cfdc87545ae114adfba0f4c6adb9e6665d7906c363d81ddab4156a60683fa34b858d1742d08e44ae93d36043f14034675bbe2c7fe78c2345779e9689c88ccd115fb713e91fb3036a69746fa666bc56f6f13ca661573fae05593a0af4bb741319456bf42534bca9eb07470c47bf09e11bf57a35dc423cf2fc34066e0cf3c6a49ec85363c03171a16545d6305c495c245f15d89ab59b7073855831c38de7ac31be3fa5b8b48a5c5754039986bcf59f42a0a75cc2f17ae09482192ae12a30a180a8bb89598f69dc25f417e9f2a6f6be729fe4af8c4a38960ec3947c84c5f83b481029081f03b75addf533880973703869125bfc81981b41072c9abd90f93739758bab9abc56e995e70f49bd0824bf03f22340e9c1dc82adc6db584d8271c5362302cc6673723dbde51a5ac7deef5199af86f0ab55ded3d174f37bc3e3194ae44645ff4a6e9f5e65282384cf823737cb8b86d74bed3f50798cf4da22f47d2b607e96c099f36720d22e4092e7425071ffbff41b48955957ec46d1f8e4eadb337d1be3c221d87b2c113715691eb630a355f1f447f337b5cd8cc25e38589c791c98adfc8f1f39b26dbd4ab22bffa24762fffc9b00f29fb6ad46597f962bd33145fb2f1ce43e1b0842237857daa049f0edd5d123f12698696b67b3f27d1429ad2ae59bdb886420e6e7f7642c1799f5429d3995fc402905c62a348bd05545c7a225a542e51d98c80995869861ff546b07704b1e18b4829a3de637695b6b4479f5978393a332b855c0c763d2b3804da4c68d04082ea42c33dfe5b6197c0b39e207e0cd057fdba42b286f29986068a57f1e29dd0e4513f33e7bbac1716694aa47c617de805b536ea0382065277895dee9922701d6dc1fd75d574f4ebcd2560d57aa90154b3571328b65d79c9aeaa56928dc1b67e46791eea1b0074f56bea3ff987ecd706741ab5bec5778c0e72bd2980f0325639faf29257080f21bc2a3ec26f46dbb861931f6f527d473573160c69273924b270724972a0a6d45451fac5e38ad4dc79264a97764f6d9eb1cdd09c8bd6072f94f44a1b42319cc576b7cbc6deb17dceedee7c5a208ed901281888f69ebf2bd316855fa31e08a42ea3a18b19cd07eabb900f3c9a21e02041a1c2b71355dfb70b40a237852bf029e66c637772005139cf1c5242126b32ffb3ac3bb4d0414bd524049df517c6d3c36796646331e099ea647af58b9efd04a280191c0cb239ccf06ca09f1d145253b22e5e7307fb62840bed85a14a33283498b05345907aa34eca9443fac3bd0d7116f474c9016be988273c061bde3a2007df0252f72db7e2636c03a58f74e9d989b3cc0f5c5b14ec7052a6393fa50391c9ca163205c558b2e87665d6b8a347a9c4e7fc0ca293a45a17da71f571ac9467f95367e8c6a78cb046950a3c986bc9cbf2ab456ad6b055265267d0b974bc3b0ede58789a22da8bc00228adcdb79e8c831cf9ae67c012ebb4d1d48a860854a285ce8cc666281e351e6d15c718a34f4e03a776d7bce0ea8856efb16664fd5abdc73a5ea85caf24f011557b0d697c1645a3c895a2fc6941092cbb6d307833eecea4466d1cd11c8458779011ef155b81d3c7a1e205f6aed2c1fad92669a5dbd2499aaf5f296b89ab0cd6aeecdb2d078b8cf66633f411ea064418c4cdd6649bf77dffbff7088efbd08bc2da6ac40dea6d1d6d08c28c1a6960785c5fc4e9ecaa45aad4dd0cba1e86e6b9038693c2c4a601a379663ebe01002b262d2d9177ba8a0fb6705f2261c5ba4dea36e8d891f03bebca7f82f9c75d53b0e78538326c11b0b3218891693853dc94dad51684be0ab4664f9317ed7a34c4609dfa06dee10e61d70dde01632e227dcc7c12eef687fbf852c6432ba3e01861ee01c0f2498fee633ac59e714627a48d7d755f5d1e465aae199def63ffd560277503a28e2369fce6d637d37dcabdbb8560dfc8588e84b6d8d70cd7497510bd5c355160614ca1fe51f6a2b4e8e284c8aec228a1b2e4660bdd60fe39c395cb8ce2fcac5d107e092d6f1af7bff61adf30c6bb478feee8d2735ab3bd50c3268e6df12cb025ac3fe4ba98886b221088dca9261c9a454ccb658909bf97fe870b6b2d2682483d0e7318640ed929d712179104927ace75f7c1d5727e471c278654972bc72537725e25dfacce760bd25f844cbf8b0a934bf23cd8fb859a8cab3b5e7895aff1804a27bcbefeb0b7f8195e2e2080fa1c1385706cb599b2a980d2c5fe6fd1b5212793ed5febf8a78db9c096938ba6c0ed9e4855fd86275a2d06b74ab6b0fe54e2a3c8c62ed8ba16ea277b47db99f73ab23605ca3bf1209a725a53cd2c327dce7014b19de3158d0a7b5cdb6310db39dc9153be762965444da0f94a2bbf9f65b337191853184864669a2738976bf17bb1d30d01d81de78544b5bdc05498164971d0e702fd1e610562295704bee0f7aaf14aa441369c54403b6b500c04157f8b7be816736bb571405c5259465db077f4d93259f72aeaa120ef9ad08f0a06297c0ad6939342cd257069fb47dc1f8fe292fb52e712dc2232ca19ece41395eb9fb51f0366f210db288240306e69b7f57cff7b68f507deea8065ff53305f571c2f20ab204a4017e8273fa96819e0f427c32a1f9f58106b7e5027e3720c3cba5ef1de57a872d77bc10e36da7bb59720820a8d932fb8b94c84388c21667e3f69c2105e58d8ad3de4ac4a53f7a8505bb7fc4eaf4a4a8302a724de0ddfd1be887f44283d27dd5246080518c87f133e6b9053632ce2289676369972f77d038a8b386dcc19f0b5759c25421acd5c7c893b8a11549ba951983f9181d439dc6e00a079ce9e54e042ab068ed79aa637de2038ee89de2d4ea489c958d1c04fa15b8b1cdc293d59f0868f6a753418113ae75ac6a9ea37ef375265817b14408023274c0b03adfcd3bfac779451c1dcca52840ef49c7194c6d1ba48b3be75653242d82ef5742223a382c4a6037bf74e8f3f282b4276e921c29b7a954102ec5aa587c590a0348c528b4f5712b6354b2b1f9eef456bc1061d7ce9ebf3651353bd94d06726f1f59817ba7f147adf760b83e8441a7fdc6d89420a7b6b5d1ea99945fdfc777b165926ce04d172dd7062931c859b9991551c0aebe92ac526a7448e2d72f586ca88214152b80f86f05da40f5489e1a57fd267d16406cc26ba40d71662b43fb6d05667bc8f220bbe033622a60fdfb4394a64b055077ae634012130f31ce84731294bf78eee916567bcdde1a03527eac9932388cea4ef2dfe8768885cb95dc6f7a7ae5fbf33a9bf1f5462a0dd1aa3a97b2c0aebfb58ed1e63eeae30a6021836a391130a1bfd10aee82eb36830b6c1859c1f8ca6eb17fdd5dbbbd1ee1c173e290fb835499f652b982e0ed80f285cc4a1cea2b02f161e4edd3769efd86715450b8203da5760bb3d8050dd03403cd6fec43fd1dde672989323741b58caf770823b7579d6f89da9ee2bc5ac7407d1d8ee651657703d1d51eda4298249efb2bbfff8a7d54cb40de943919d9da16852c508edab1eeb0b2ccee5e7c73f3de2dc9c76ef5fe4e8947730bcde79639fec226a5a5d90118753b56cda6c8ec0ab5a00b4efb073c2caa9d9922e57387b0a2648bc9bfb869cba9e5bbad0bafbddf3775498b22a7454cb9154e895a4a39aacaba22a15d94f3331c0b45bdcfa585ee6e47517f712a91ca5d9894f3930c9697c86cb4d3af656dc809ce8494bb438b18685297f571c11b9fbb6e445088365453005062e512583d6611f808f9d7efeb089ed50a880eceddaa55d2ce9ddfa55ccbbb1b53168ca1a769f4cec268df8c9039c79a56f18d6f33545000a161a57ca78964f1986afaa66b8f0c0195f4468c007af61627660b4f6b68bfc90a8a145b6dfb8941bd15aee3d139652d18ad32e8502b0f526e7966f149c148323e74ef961a7b64865c5e0906e3c5172d682ab283c980d38321f66d2d9a66bae21ba3d4d4aff233f76864f8842c9ded594c2bcf47edfbf9953bab122c50ebefbf014ca56ab588202cbde7957a946bc9df55bb4bc5fe372c30d576acba9a69aee50d7669afe8e818cf454cb315c0dcdfbe103356d31ea996fa2b3946b1fa1d40e8a7aaeb271159327ba506920b03541ca5bd473060acecd8dbf64f549cc323621532a4fbcd361506707f351fc18f8c5a1b5190841e904fd62b3cd680b5c2e80bb49fcd475267c6ccc2f67f4b5f580dc311707ebf5129b66b36757b0bf639c01902645f773769816d7bd27172e57a6e6a11bdf86d8aea5b81fa961dddcf1176bf70e0e0a230c8943edcc24acd640f283871bb60ac214ba72adb8e70055094534ee1bc4ad70d4b19fde1120857c2949e489ff0f5e66d093eed6fb767ff65e8e7debbed8545a912048125f5ba85d40b01aeacad5fb9196e83b5e9f42cdd93c92db34ceb23a2e20fed0942d68b4fadd31fa505a2a43f55ba9e88240e3053ff326b7a68d105b6de93c11e22b3eae1a07da402fc95b34aa8f648ce8c06d7bdd757cc696b2f07816a0b7796fb8d43d447cfdf2ea7d2f24a81bb946c57eff05fb18bed24ff0ee49d1ab658ac8afedc4bee7dcca690594b10d27ad02964b8784056ef137c0771f8a513b43a16de2b97c3496c4bc821fc3c3f623008566803e130509fc04128bf9dadca56a566e51112bf8529164571d9c06d327a802e95ce5fa9f0b86f28d9d360dd43aab0a8b346892670dfa054e4e602d6e778312015571d47c33b5467531a0541446882709a85564bc0af5e04e759106d95c42156ef9f5cbbdf954343dd118cf5d394d31a0247fd23c158e04b1b679da77c62e3702b4943a8ea048df1b0a97778df47fe85f098f6c4708d1fc4b694a04d94da8d6659ddd617429c5d5314393b2df03116758c639c52524321abcf266add8f9127b87c622a0e7eb17ec42c1e4ca22379d463a1a4a306209e5b9b352255c7bbc45d52d7c4459e460bbea55e3b4462223bad5bce7b5a8343bafbb9294ea25952009d060d1d7034966cce60fac6f80965773678d5ad23a2cfece9eba2c933ac3e0a2cc0a3cba1c8726d34dad53f2112d5093743250509af020e7b70994882b1f70a15f71e3e427f5040f8a2c9446d3a4068e5bd0286ca02b2319576254b87903b9fea8d06a863156d475ecef5d80b512629f2fe192a5cc0caf7cdb50f3dcdbe317abfbe98724d5dc824a7c207664e9af29660c49233a1064d885d1de2b68fd4720e355e3d58886cad586bdba23bea496f995bb35c1463ba12544b0a0073f2449c83e70079b9413", 0x1000}, {&(0x7f00000020c0)="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", 0xff}, {&(0x7f00000021c0)="b8d69c5e96f9df94876ed1298fbcb11d6148a45cfb0ecc5b3d290abdc7f80171dde593cea6b47f29178a6692f5850cf692c887e0ee8e34c4dfcda0882594d22f4763f762e7ef096acfef88b74fcabd38d430e5fad9c9213faad5f60797339c78470af44f3a96d75330bdc1d738a48470b306f1222bfe97e8c051e5d9c04f461f06", 0x81}, {&(0x7f0000002280)="f4b10f1176620991b79eea3d194eb5fa703371df182ea97f8aa1cf3f1970ef946a0c1a", 0x23}], 0x5, 0x0, 0x0, 0x40000}, 0x4014050) [ 396.439429][T15034] FAULT_INJECTION: forcing a failure. [ 396.439429][T15034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 396.453049][T15034] CPU: 1 PID: 15034 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 396.460989][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.471091][T15034] Call Trace: [ 396.474464][T15034] dump_stack+0x191/0x1f0 [ 396.478873][T15034] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 396.484837][T15034] should_fail+0xa3f/0xa50 [ 396.489374][T15034] should_fail_alloc_page+0x1fb/0x270 [ 396.494822][T15034] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 396.500361][T15034] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.506502][T15034] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 396.512738][T15034] ? update_stack_state+0xa12/0xb40 [ 396.518041][T15034] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 396.524184][T15034] ? __module_address+0x68/0x5e0 [ 396.529205][T15034] ? is_bpf_text_address+0x3c5/0x4b0 [ 396.534590][T15034] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 396.540733][T15034] ? is_bpf_text_address+0x47d/0x4b0 [ 396.546134][T15034] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 396.552103][T15034] alloc_pages_current+0x68d/0x9a0 [ 396.557306][T15034] __page_cache_alloc+0x95/0x320 [ 396.562323][T15034] __do_page_cache_readahead+0x46e/0x990 [ 396.568058][T15034] ondemand_readahead+0xdc5/0x13d0 [ 396.573255][T15034] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 396.579505][T15034] page_cache_sync_readahead+0x38f/0x8a0 [ 396.585226][T15034] generic_file_read_iter+0x998/0x3e70 [ 396.590760][T15034] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 396.596701][T15034] blkdev_read_iter+0x20d/0x270 [ 396.601576][T15034] ? blkdev_write_iter+0x650/0x650 [ 396.606706][T15034] generic_file_splice_read+0x730/0xac0 [ 396.612291][T15034] ? splice_shrink_spd+0x100/0x100 [ 396.617419][T15034] splice_direct_to_actor+0x587/0x1130 [ 396.622905][T15034] ? do_splice_direct+0x580/0x580 [ 396.627967][T15034] do_splice_direct+0x342/0x580 [ 396.632873][T15034] do_sendfile+0x1010/0x1d20 [ 396.637524][T15034] __se_sys_sendfile64+0x2bb/0x360 [ 396.642660][T15034] ? syscall_return_slowpath+0x90/0x610 [ 396.648236][T15034] __x64_sys_sendfile64+0x56/0x70 [ 396.653282][T15034] do_syscall_64+0xbc/0xf0 [ 396.657730][T15034] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 396.663653][T15034] RIP: 0033:0x459a29 [ 396.667572][T15034] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:30:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)) dup3(r0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r3) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 396.687194][T15034] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 396.695629][T15034] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 396.703612][T15034] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 396.711597][T15034] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.719601][T15034] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 396.727606][T15034] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:44 executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 08:30:44 executing program 2 (fault-call:8 fault-nth:12): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000040)="2d115448d9f0cf5c2401040000000000003542781958846a901906aca632b3023d00"/49, 0x2}, 0xf) 08:30:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xfffffffffffffbff, 0x120002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x203, 0xffffffffffffffff, 0x0, [], 0x0, r3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r4, &(0x7f00000001c0), 0x0}, 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$packet_buf(r9, 0x107, 0x1, &(0x7f0000000180)="8512e8e9b2542b97895860301d8e4119bb8cbe70f69bbdfe81a634122c77f8997475d79d94079dad8191a5c6fef9a88016c8c7ad0fd78a80e586e4cc0c1e0538b731500b8db528ee3c3e74db79f68905f460f9400dd190", 0x57) setresgid(r8, 0x0, 0x0) setregid(r6, r8) [ 397.124601][T15060] FAULT_INJECTION: forcing a failure. [ 397.124601][T15060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.138079][T15060] CPU: 1 PID: 15060 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 397.146015][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.156112][T15060] Call Trace: [ 397.159447][T15060] dump_stack+0x191/0x1f0 [ 397.163898][T15060] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 397.169869][T15060] should_fail+0xa3f/0xa50 [ 397.174339][T15060] should_fail_alloc_page+0x1fb/0x270 [ 397.179736][T15060] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 397.185226][T15060] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.191319][T15060] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 397.197502][T15060] ? update_stack_state+0xa12/0xb40 [ 397.202729][T15060] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 397.208814][T15060] ? __module_address+0x68/0x5e0 [ 397.213791][T15060] ? is_bpf_text_address+0x3c5/0x4b0 [ 397.219096][T15060] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 397.225182][T15060] ? is_bpf_text_address+0x47d/0x4b0 [ 397.230518][T15060] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 397.236432][T15060] alloc_pages_current+0x68d/0x9a0 [ 397.241575][T15060] __page_cache_alloc+0x95/0x320 [ 397.246536][T15060] __do_page_cache_readahead+0x46e/0x990 [ 397.252209][T15060] ondemand_readahead+0xdc5/0x13d0 [ 397.257357][T15060] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 397.263545][T15060] page_cache_sync_readahead+0x38f/0x8a0 [ 397.269213][T15060] generic_file_read_iter+0x998/0x3e70 [ 397.274731][T15060] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 397.280650][T15060] blkdev_read_iter+0x20d/0x270 [ 397.285527][T15060] ? blkdev_write_iter+0x650/0x650 [ 397.290652][T15060] generic_file_splice_read+0x730/0xac0 [ 397.296232][T15060] ? splice_shrink_spd+0x100/0x100 [ 397.301360][T15060] splice_direct_to_actor+0x587/0x1130 [ 397.306834][T15060] ? do_splice_direct+0x580/0x580 [ 397.311897][T15060] do_splice_direct+0x342/0x580 [ 397.316792][T15060] do_sendfile+0x1010/0x1d20 [ 397.321519][T15060] __se_sys_sendfile64+0x2bb/0x360 [ 397.326652][T15060] ? syscall_return_slowpath+0x90/0x610 [ 397.332230][T15060] __x64_sys_sendfile64+0x56/0x70 [ 397.337273][T15060] do_syscall_64+0xbc/0xf0 [ 397.341718][T15060] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 397.347627][T15060] RIP: 0033:0x459a29 [ 397.351542][T15060] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.371250][T15060] RSP: 002b:00007f04cc990c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 397.379699][T15060] RAX: ffffffffffffffda RBX: 00007f04cc990c90 RCX: 0000000000459a29 [ 397.387702][T15060] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 397.395777][T15060] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.403770][T15060] R10: 0000000102000002 R11: 0000000000000246 R12: 00007f04cc9916d4 [ 397.411750][T15060] R13: 00000000004c721c R14: 00000000004dca50 R15: 0000000000000006 08:30:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0xc0044dff, 0x70e000) 08:30:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x9) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 08:30:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x10000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x1, {0x7fff, 0x12000000, 0x3, 0x7}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x8, 0x10000, 0x0, &(0x7f00000000c0)}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:30:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) 08:30:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r0, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000a40), 0x14) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 08:30:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x14540) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0), 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7803, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x0, "73861bcbe2022653c88556a4ffcc63775d7cdce44a1b9d2575bbbae937c9f281"}) 08:30:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x40200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000540), &(0x7f0000000580)=0x30) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000440)={0x9, &(0x7f00000003c0)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f0000000480)={r9, 0x1}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r4, 0x400454ce, r11) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x13632dfc3cdb54ac}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x1c, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x19}, 0x4000) 08:30:46 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x5, 0x40) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000200)=0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, r3}, &(0x7f0000000140)=0x20) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r3, 0x4, 0x600, 0x2, 0x20000, 0x8}, &(0x7f00000001c0)=0x14) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='\x00', r0}, 0x10) setrlimit(0x7, &(0x7f0000000000)={0x8001, 0x8}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) dup3(r6, r5, 0x0) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000080)=""/187) 08:30:46 executing program 1: r0 = msgget(0x1, 0x0) msgsnd(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x1, 0x0) msgsnd(r0, 0x0, 0x0, 0x1800) 08:30:46 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xf, 0x4, 0x4, 0x1, 0xd21f420f488dde3d, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='+lev/cH\t3\x91\x8d\x9d\x1a\x05s\x00', 0x213000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @mcast1, 0x4}}, 0x24) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20) 08:30:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = shmget(0x0, 0x1000, 0xc5a7939cef5172e9, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x1000005001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f00000001c0)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x111000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r6}}, 0x18) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/31) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) 08:30:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 08:30:46 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x7, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r1, r0, 0x2, 0x80}, 0xfe91) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, &(0x7f00000001c0), 0x0}, 0x20) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt(r4, 0x1, 0xe76d, &(0x7f00000000c0)="439da32d78c4328a003d2f9fa50d281fd690040be9614363c13764b7c70a6c8718e1168d15b1995e511b148e6d7792c05d43170bec16cc84d748369f7428c1058c0cd3219ddef422a1cec2132f22742f63b2a20e6d7ec9660cceb0f73ce795103cf134a451e0cfc31d5fd9ee5054e4fbb59a80445db4e07d44dbf6eeb367c3299305b8a8794260b2e508111579a4808a5c66b1e3cade17bce3eb8bd34dec02874e64df24c7a457d664eca076915bec2b739f1b355aadb0ba5c8a10c5207d", 0xbe) 08:30:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) [ 398.466192][T15138] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 08:30:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100000, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c5010000", @ANYRES16=r3, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x9, 0x8, 0x6, 0x400, 0x2, 0x1}, 0x3c) 08:30:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c97000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005180)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="96bd599a7d78a48c1dfaf825bb9a4a41", 0x10}], 0x1}], 0x1, 0x0) read(r1, &(0x7f0000000000)=""/17, 0x11) 08:30:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000200)={0xfffffffffffffffa}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r3 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000380)='-GPLutrusted\x00', 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r3, 0x101, 0x4, r4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendto$inet6(r5, &(0x7f0000000240)="028e02c186be85e3ad707286f516a2559b91fe4c1d2cc625f14495420c7aba89971f8af4d4d1259d9e5a1902f7b825fa3e970d8533a77c8abfb02e029f0c1e62118b5a126dabece521b9e76870245a37a0221fe86dc0f620b5a9cb25db113580a41262afe42bffca81d8a0484e2944417212612c1c1d4ee2de2cf967dfc7089e1b76a7941b0b21be7638aae6efc791b3aab1c3d30c6c561e868ba424e9c0cd4611a1073cedee2ac0c331dfa4993c2df81c3e001b62acbc25867d672720eba916a825a98508b921ad9def8587285c2f1f6cc76ab44b41b8eec32954b6841f1d3d06e88492f9441aaee9e05d7f", 0xec, 0x40000, &(0x7f0000000340)={0xa, 0x4e21, 0x81, @local, 0xfffffffa}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 08:30:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xb2) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000), 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636271003004020004040700"/1024], 0x2}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x283) accept4(r5, &(0x7f0000000300)=@hci, &(0x7f0000000380)=0x6f, 0x0) r6 = socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@broadcast, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000008c0)=0xe8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYBLOB, @ANYBLOB="00000000ffffffff0000000008000100636271003004020004040700"/332], 0x2}}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00", 0x12) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000900)={0x0, @dev, @multicast1}, &(0x7f0000000940)=0xc) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) bind$packet(r10, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000008000100636271003004020004040700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050005000000000000000000010018000100"/1084], 0x3}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x12, &(0x7f0000000100)={@local, @broadcast, [{[], {0x8100, 0x2, 0x1, 0x1}}]}, 0x0) 08:30:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r0, r1, 0x0, 0x102000002) [ 398.982401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 398.988580][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:30:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x80044dfd, 0x70e000) 08:30:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x974243b0fd1f7891, 0x800, 0x2, 0x8, 0x8, 0x1, 0x8, [], r4, 0xffffffffffffffff, 0x3, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r5, 0x3, 0x10}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r6, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000180)="026c2690a689a130f89296360de7a6cc27d11edd9bb2f6bb17d2e59fd3933242ff5ed73b711b33a0f2e09b629d9ad50dc3c8fe5f1e0ba08e29cbbb64de7e1a5d000e27bb", 0x0, 0x8}, 0x20) 08:30:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r5, 0x2}}, 0x18) 08:30:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2edf248532d92ef0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x12, 0x9e, &(0x7f0000000140)="fce0d6e6cbba946ed941cca8ba5f17111c7f3bb5ec2d426c5c1a925265fb5b6437f79ecedb2a9a5f04d2e280834b57a0c242f0ac0d9ab7cb39f697ff082fd0f92fbe647d649e41b31ec6dfcb9dd668022de25e63071fd1628dabbcdab4ebcf150945f0ba5843f65356bcc5493be4d1c96a0e1bb29df0febdab91c2d6baba5f0fd83e2f358ee5a4f90d815c254a328ff7363339bd40c351b92bd502f15383"}) 08:30:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 08:30:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000100)="4121337fe05f5086800d882d781deffdcb22b6186a408c9cdcd6b373ffc319", &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0x5, "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", 0x2b, 0x20, 0x8, 0x1, 0x9, 0x4b, 0x7b, 0x1}, r4}}, 0x120) 08:30:47 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x14371bfa, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) 08:30:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0xfe0d) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:47 executing program 5: 08:30:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x12, 0x4, 0xffff, 0x1, 0x40, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x10800, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x31, 0x300) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x105080, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:47 executing program 1: 08:30:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0)="d245aad4d65ffaf4ce7139fa1ec2afdd23ed3c3063c576eaced55a663373b8774ef4ff8eaa5d84634a74e76a8e6996af3e1e2683343c930a5730cd26d10999ddbdf6c6e1c29eecbe3de048a5e851fb7fe3b069a0390497e10400de3614877c", &(0x7f0000000080)}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) 08:30:47 executing program 5: 08:30:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x58080) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0xffffffffffffff8c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20) 08:30:48 executing program 1: 08:30:48 executing program 5: 08:30:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000002c0)={0x0, 0xffffffff, 0xfff, [], &(0x7f0000000280)=0xa2}) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000200)) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffb, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/udplite6\x00') ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x10000, 0x0, 0xf000], 0x667, 0x20, 0x200}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)="1689f08e7e35d8181add4a879672dd770ce776f31c", &(0x7f0000000080)}, 0x20) r4 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x1, 0x80000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000340)=0xb51, 0x4) 08:30:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x101000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0xc62b820b96ea25ac, r6}, {0x2, 0x4, r7}, {0x2, 0x6, r8}, {0x2, 0x1, r9}, {0x2, 0x2, r10}, {0x2, 0x1, r12}], {0x4, 0x1}, [{0x8, 0x5, r13}, {0x8, 0x5, 0xee01}], {0x10, 0xb}}, 0x7c, 0x2) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0xfffbeffc) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000240)=""/187) 08:30:48 executing program 5: 08:30:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000000)={0x5, 0x8d}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000000c0)="bb6aae1e2f2899edb520ca8eb71260b00cd44d4f0efcfbd707f499add5525df162b2ea09bf6116d0e585acab0ea18747a64b0730b4e6b54f58616128225f1ef102c983afba673f069cafe92c86c9dc5c59640d1bf2b8afefa69cc40b8c64bcbc5adfbfbdd9a9501ba3c90bc58bf602b287cf74c1dc12f92a52b5d19f618b93805746ed2ea7d484339ec6236acbc4c4000dbdf3e8321be0fd2a3c9e7210", &(0x7f0000000180)="3ef8870eb132032a519ff04c6cceced309405f15b90e22ec01836083fff3e2b0453f2fb8e6bdea804e4af1aea22800c815e83d3aeab777445bb508959d41ba916baf5abefc90e46343c1158be69f90293ddc99f78900ba52138d34c1ed2169ade7d639e8", 0x1}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f00000001c0), 0x0}, 0x20) 08:30:48 executing program 1: 08:30:48 executing program 5: 08:30:48 executing program 1: 08:30:48 executing program 5: 08:30:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="9250e5d6425dcdcd354b52d70cc3aaf5cf455c82dc4e2009db821ab74b58aa1afd02521592b1c8d1c0d68d949477b822bcdcd2a6d0976c6ca2a93e5a907fd8abe38bb073fd2d7300980fb5e3e78a79787e5011ac9a5e4a1ea861bd9b01b6b77283b0552378e3f5", 0x67}, {&(0x7f0000000000)="946fc5ab8a79523bd4a6eee498ddf264e108d0417f091f", 0x17}, {&(0x7f00000001c0)="6b448be90ded80ad70972adb8cc3f804429678674319ddf0649d65", 0x1b}, {&(0x7f0000000200)="164b43f48128baff3d023cfc5879f0a4c9de925c3b0835aa8e01e99d04fe4311f841cd3aa56badec636b209f62d1f987fbad050bcd8a2bb5ccc2938cdf457036a32ba65e810e2928997100fc163f198de85c6c471aa7dac9b3ce6e53d96f5cf91166e9c9b25be8235c6b2573fe644f", 0x6f}], 0x4) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r0, r2, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/187) 08:30:48 executing program 1: 08:30:48 executing program 5: 08:30:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x200000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/4096) 08:30:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:48 executing program 0: lookup_dcookie(0x81, &(0x7f00000000c0)=""/151, 0x97) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180)="9acd35707ecccb", &(0x7f0000000080)}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:48 executing program 1: 08:30:48 executing program 5: 08:30:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @initdev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=@getlink={0x2b4, 0x12, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x2, 0x20}, [@IFLA_BROADCAST={0xc, 0x2, @remote}, @IFLA_VFINFO_LIST={0x230, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x6, @remote}}]}, {0xf8, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffe, 0x7}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, [{0x14, 0x1, {0x7, 0xff7, 0x9}}, {0x14, 0x1, {0x7, 0x25f, 0x20, 0x88a8}}, {0x14, 0x1, {0x5, 0x280, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x81d, 0x9, 0x88a8}}, {0x14, 0x1, {0x7, 0xe25, 0x2, 0x88a8}}, {0x14, 0x1, {0x9, 0x8ba, 0x6, 0x88a8}}, {0x14, 0x1, {0x3, 0x6f5, 0x31b, 0x1c6f80b213a7841c}}, {0x14, 0x1, {0x2, 0xd8, 0x5, 0x199f8}}, {0x14, 0x1, {0x1, 0xb85, 0x80000000, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x1ff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xec}}]}, {0xd8, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe6, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0xffffffffffff0001}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, [{0x14, 0x1, {0x10000, 0x39a, 0x400, 0x88a8}}, {0x14, 0x1, {0x5, 0xabd, 0x0, 0x88a8}}, {0x14, 0x1, {0xe0638c2d, 0xd5b, 0x200, 0x8100}}, {0x14, 0x1, {0x2, 0x57b, 0x400, 0x8100}}, {0x14, 0x1, {0x7f, 0x6e1, 0xf6e, 0x9250}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x3ff, 0xffffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x100}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x2, 0x1}}]}, {0x30, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, [{0x14, 0x1, {0xe0, 0xf6c, 0xe7ef, 0x88a8}}, {0x14, 0x1, {0xce5, 0xdf0, 0x7fffffff, 0xbe590b2818c91a55}}]}]}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x605}, @IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffd}, @IFLA_BROADCAST={0xc, 0x2, @random="bb2e96018dd7"}, @IFLA_MAP={0x24, 0xe, {0x9, 0x9, 0xfffffffffffffffe, 0xc38, 0x81, 0x80}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:49 executing program 1: 08:30:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x9, 'syz1\x00'}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000280)={r3, 0x1, 0x6, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:49 executing program 5: 08:30:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x105800) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000200)=""/187) 08:30:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x1000, 0x4) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000040)) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x402200, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000140)=0x20) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000640)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xe8, 0x1ff}, &(0x7f0000000780)=0x90) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000001f80)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x78, 0x401, 0xe47, 0x32, 0x2}, &(0x7f0000002040)=0x98) sendmmsg$inet_sctp(r5, &(0x7f00000020c0)=[{&(0x7f0000000240)=@in={0x2, 0x4e21, @rand_addr=0x80000000}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000280)="71987e3ab56f4c4b8a913d3cb4122fcd94c55599ea2d31f27d856c94b625848ab8640f88b781827c37fcffedc6bf00416b0976ad67dacbb2328e30b54d3477033c2029efca06e06d6dcfdbb248da409f2e49181a046c63db15caabdc9a3ba6516f252af8d2101a15553c", 0x6a}, {&(0x7f0000000300)="2b502cb50abe01462f6a5253498b2e0ab007b3e956767c4eb8378b1ae8655f8f191d7e6238f2b9c7cce0005f49092a354d511e99879f1b9c246370ebbbfba2b9886f4bd8ef08942225736366f75dce104fd92c9afd53528fee380a4c9d298a46517676cf1741af91b0", 0x69}], 0x2, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0x7, 0x227, 0x6, 0x6}}], 0x18}, {&(0x7f0000000440)=@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x14}, 0x80000001}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)="0b9fade07f2f340ef904c224d92bceaf87db62a61bb4b7f8c06d143dea8f3fd10f349b757ab86f0755f601fef428c85ef31fdeff842509b6cb749904e7011f5d07e62e5c65dd3d8f49d9d16da250d6232cb29e14a811b57eb2dc03d7f47bd5a442531b62693436678341dd8c291e410e8e2fac4e3900c66349de6569e9cbb2fc3615a989b953f66e192ba08966fb5cca448868db6cada4dcde12d38ea75199f4b67d476455f71c93a7b8cfac151d70624bf7a6504910b2d3dea2a9845ddba549d1d28065a85c2f9f56b26ca21f2812a63df1550e8cc2969d916303df931c43f05290fa444d4870", 0xe7}, {&(0x7f0000000580)="e22fd5f720b029a0ecc57777d551e346bb27df08c1a3723221f195169a5562546f4d70246b67899e47e7cba1975c8bb7e819a09212b0dd6fad26b362", 0x3c}], 0x2, &(0x7f00000007c0)=[@sndinfo={0x20, 0x84, 0x2, {0x81, 0x204, 0x5, 0x7, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0xffc0, 0x8000, 0x1, 0x6, 0xb588, 0x9, 0x1, r10}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x9c5, 0x3, 0x18000, 0x8001, 0x5, 0x423fb45f, 0x7, 0x80000001, r11}}], 0x98, 0x80}, {&(0x7f0000000880)=@in6={0xa, 0x4e24, 0x80000001, @local, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f00000008c0)="d866a367ef37b56c6c367c77505adfbfc8d5e31db04061d0950c98731ffbd823eefd2f873038d7f4d49cfe434b7e2ba5e40ff58c8d116d39b472c6a0ecf09120492ce7707f12c7754c5a25cd2c67d779d39159625a8e6b36e2e092baf6a5ef39f89e28acb2484e1ad3cf0df7c5422b6e9a058bff5d24af46037785eb22107830bec3b8088c8b8e60402110818434363a42f64301a4e2f0d2faffe107625b6e4a43980e5679739da1d188efe7c0b68e16f8f80f8e45c8ba5c5abfd3df6e28ab453bfbd9de014d2ec1cf78b216a5ef3586df0f600946f987a561659689af1b54992c010a170d8acded3daed19b299a", 0xee}, {&(0x7f00000009c0)="f8d80b789e7c1ca04eb4cddff51d709dc6ea45bb16a67f6a54a497a4f149338eae7ef582c641f0af354f5ffb1ee591ddf7a25ed70494bc3aa373d6720f7b7d279512da31fe91b159dcdc16e526c2b17ea17bd196d1e6f2f6c5771c9614f83a8d90e3de85f51931a2e531c121d12829b90a116e0645de068b73294fb5477a37530cc1eb943eba485b6c4961", 0x8b}, {&(0x7f0000000a80)="ceba0e690c10ac545a", 0x9}, {&(0x7f0000000ac0)="95a091fe4da28ac31481a89746f9c0d87cdb3bc5de377c9b0e2a79fedbd6bf740222194e4b6af6108b6563e0b3", 0x2d}, {&(0x7f0000000b00)="81f5cafe7918ece3261e8dc86d7ccc3e2cb542bf64bc8f794df904613c5e5673d13fe283a5eb70d85b611458a2ddbf08139706bba9a012db52471f5305f508733e2989d8b184767ace72e236fb77602d697366a55e4539a40f7e4d06a5b321962afa8cee57095f9c09aea45c2cf2afa39a40a4481f892459872ff4ea1c13f2cdbce969e686bae579cb06af4185947d472f4f140c29cb8f4e", 0x98}, {&(0x7f0000000bc0)="a976cfe4308286d602d0a130f8d2153b6285671f5c821c0191f1ff9c27c1af6715741323e7494b8e6b68358293f2246c328fe559b095df24e4edddaf9bf71d7de508cd814d198632b247798afa4226481de3a11e8e05e4b2b4996f91dff69c95b0e1bc69796aa8115346e992a2c3d4b37db38324325dc32138987fa3ec404bcdd4cbe402b7613d2d737d27759806d98864a25d6ed8f806751dc59b2f717d3e52e653a2bfc66b6e0650fe42af6954c5e5c0248ee4ef34f5b7a0d1a99404bf962d3f91ba4b409c911eabe05a1e18a65dac0fd51e66373b192f13cd676969e3033649bd92883852b6943e7420943c6612fce128cae58df757f4f1717e92f1f26a82cce2d4494b27256c84aaefb6d40970da4d13cb747bd473d009917e20267a98562b12bab77e57a102936ee9a1fafec64323501886fa5a58c60b93fe475dc5f0b51d8c6bc27096bca1d6628f598032c80470dbcd459ee32e7f6d3fd85c6880383f79c0c8d3e0afd60ddc6da38000e53b7b9b3b54e5b82fb22349a653ab7d37018efcd920cc862b9ccdeff2a6e9b0fdec9f288f78129858f33c7a1608ea8919af70cf5d6236ebb433cb535542373d9bf73c2dbd1216c2e984bc51baf4533aceb8a698d8602665e5fef331b8bd8cba234d5f9abc5df877f5de51836870d46c11aabee86e2c9237761e9dd5ff3d40c5caf75cd8277d9b9bcf59723edf86fbe784866602d7303e24b7802fa675e7f86164d5a17d444202b2be8dcacbc9e494c5525777800134629f7560612712f01b29d41ef5831ec15d51bffbe9211c9342282af3b0603742e643e3c43e4cc57878136374323bb20ab3f1bfaac8cba1f1deb3b400717b40c0fdc724ba30500f70d12e7ebb9ac5e1df2456fcb167fedb0aca42af4c51f0ae5f3c2f03bd1d8b7e28e69da2a3341ee133d062655081bbcca242e0ce7ad1a7f611c52c1e8ba584f4a0022db062cc53707bf03bd067e865c3e6212dda30a81de9268c816afbd7033a4c97160e81355a1cfd93832906378bb05ca9cc05f0212a7fbe1459b52351cfabdd09da469a0e6145dd058a3dec3c62702eaebe031ddeaf7be643060ad5a970818ef04fac69478b90bb2072196f21004f0aecb8f7911432378f829e43dd38ab25e8fc3b23fe674d9e676b9eb9a5732f8f7b5aff2d0b68b216a6fab008543a5d41b1cfa83b26d4d92a1ccfdd9ad8b5b0ca586a6a7de640140ffc55da162b2f73ba57c6e7248f4e8546b43cd23af4c3c2cf2f964cc7d5e7ad80985d7bf7fe44d6e87d05c908f370a10935599687cac8b08ac585ab8e57c1c189a3a3661e0726e34b262374a9d2ebad753bafa95a9ef8e55d50088365f0dc8d1c445ca012dd43560844e7066955cce372cfdebb338d447d56e6cace189d7e0f7ae883bf20f6f62a329a0ca7b9a519b1a392566c4cf29e67d796672289b6696cc37bc8b9be093f91a4a76c49b53f4a9bc292a82d8ac6276465d4c8be0753021febb72106710da0dabedcc40f05572cd08f3007787c9460a11cfa550ee5e2e7d579319ee2bd567a736ccf4025f789e48f2fb142c90a7a9219e43c98532fa129ab096940875eca7f2a98c3b9ce3f1e63855711ae1368e1f6f9574f1d193f9b0f4fb9a953b2339c1cd5b3ea596b6abc59056fdde91d77e020616a2aa52fbcb953a8e3ef793d5ac6168e2902d8e920c09374cb3d956211e7d2c8d529d9d8751b4d2b6e7303d4638bee08552e7f873f00b5bd6c409a59527adc1f60d3869753bb457a42aeffe2785119c3a53c846d724cbb60424a4be90fa1b2c2cd747ada218a4d0fc269be75f8f2769207d9c31785560adae7b4b79820a66e0378c5d5467a5d5d34c24e13122962ca62b1fcebd7403dad1e1d7f3a4b0da899513668a9ca002781ab8fa38abd9bcd640b7e25d59ba8f4432db37fbcdccef9b8eba11b8d4342d5395f7573b84d9fb4eb14a7d48c45bd762cba672adb5af680cbcf34857bb15f54509b14dab0f2f0a08c1ce1548a4118a7e8aeb625470c57a7ccab510dea8776d36f6fac698ef271b13e611339d3e05691927ec4b3cd14161076e1e7936d56cf61d5a3702017ac8d405b8d209c11fe68c3a094dfaa463ec8264ebd38ec7a475c27ad3655cabc91589750c49c659d8e8ac35d4eb09c4586ac4101a4882be812c4330d4504e5b169f03685fde9f0e823ac0c38c34b72121913f1d7d3e2105d280861e3261f4455c97664fc77475fcc3e9b4641cf04a10947a06edf20487ccb0374be4c2707a03e5b4203d2ccec430f626f1ad8253de510d7af39353ba1e5485f51126007a97b397ae60e8a5d920d6543838d71fbf11da14314c61850e96f939398c095187189304d68975a8aabf99480088c25dfcc1c522c875141a81636626f23ff7d62e055080562d11a387a9232e1105a629f21ee33986c04ca229eab8d0282803c9ce7053a2cdf953a0ea4a062ad7433e62db51f347f8d8339b2dc3db5509977135a3e335c79dbe5fc01a89257e504b62c1c143fe7337278f8bbef42955948de6c413e29daa04cc3d02ba6611408d358a8d8829947c251c2ff5b26c2c95e3efa38a7364f4676a401f92c0262989d28be1e5066b99da74352845d4acef71ff9e1c1847e03838298ba31855dcce93d4f2f1f8e72528a4efcf4c6a040661d31edbd2a9a8efc5a08c925cb3d1564fccdb55bed48bc60145a20541102236853dfa1e0c133490530caa5de29ca4dd446d4d145deb397acd43ef601e991f255c495a78a37b48356d9edfaeb5cc0ceebd20b64662c30e29c32d6fe1bbcbb5408d574b649bad712da3cd34c581872f72af04a78ae3aa4c6c35f31acaa646f932052c201c4cefa07651224201aa01a07667ecdf78226ca7f8540b420a7914d0f9219ceb87426d886a23158e5b0d90bf4c323ebebda5c30f40c3ef0b0c3a4b7bf14b7e369a9fb18f89945d403ac501ff737c13121df8f17517c8d0f9df2bf31187ca9f5c4d5f4741a224bf53f941720c3e75d82e356307120c48a30c49a5eb9b145dfae705d75237323bc7a8581f1af91298aca3e2680750ca1156df9a0f9ae4e728d042e99820c8c11298abe1dcb5962efa6ef25e2b0c6d4534cd13884fe714718d8bb931d6de654d5071641c8ced5d402b734af80af7599932d88272f26fea5164a231ec56ed5ac1b1618e588784fc8b94b59022745acf5b31d509a65a901e18bbe890a0ec6ac2df710c7c80734106928a15b4e26a49a175a91997562c3b65169d6a2cd74e5061f888aa3863ae00bdf427429291a1347c7b93b9e5cafd377b782c6a56b287643352f381d85ebd2495821c12c164fd6b0382d19d3583c5e2c5cad885ba93539cd4baef668f499f468c37062aeabf0f208b30156bd6d384f07625841a56050976f9bfa64d7f394c5051bc54eb3061936f7bcbae60d3d84dd17725a88c9c576cdb7c55317b96ff3cdfb11e60fb5c34deae9c629b96cdd427a1628590f9fd0e6662fca58d6e58b690a5c3e305527ebb2acdf38de24030a08690f3cf233a5f1d91a3e72f49cf6aef36d3b63a2e3007f0b0d2a35c075376df68b9cb71c98ec3ac35b8eb1257ec22ec32ff6d6285f8fcee9c25d59023606c9b29827652dbd49e586db27f0f0488c85d22291a223753a08f9a5c7a2525e89be42f53414b5b72a73e3f22621038d88f77422cba2a7cd3f53a6cc3d079560e4c7ea5b6569aae3c2f1e54ade164a513aedf8576692db7b7fddcfffb9538b63160f85e704fbdd3e1b22d1c979abe5593b6e474444cb86432c80bc808c7bd9ea159a974b8519d3a9b75c02312f91028fe9b98da3d44e338caaa8548e1f345262b5ac2f25e678badbd38bb7c1040c111ff801f5633dfd85dcf3f6015887f354889a7fe923bba21ddfc68560d52003f558a985fcb7fa38c6bd71cb714f27e087619697a7a1bbaef0a7129a02189a3c5f4b33553950ee8b5e0bbecfea8a30e2fef6b6472d35760faee3f3ad3ccf1633601977cf97876d291d616dc995fc74bb1e786fbcacd1c8a7ec47930077cf51e2b96b43123792beed5f0fb952b890e7da3f5327eda07603566031d74e1a53fa35175d29ebfcfac48e0b0532e995806138a7e4c79cb0aea9d0697d48f4c2d61f41de2ee950ef91c7466f06683535199133e684b6eb42bffbc7912baf54f6ffb6bbb3f670006ce1a3a6daffc00733b36a5cabd5e72618b90082d68e35dfe122d9cd2aba574ea197e856da6986c47ebf750562cf8d3051fdc6953e2b3c438e70f481582b7b2e45ef3e81f0d1e6dfbb5792dbea02952e62132954c18f83e79829147af741d18a65a2b3a1bea56a5f84ebdec4f5cc2976cf4f78489bfddca436195588b8e4811f528973a765d6cea55a1b08f55764238038a6c45f5cc25247e4d46e685814276229e8346a8bedc79e0ea1041257f1d83a9dd34adb864c497dae47410c580182ea1d974c2cb6f0ffc11077acfc6c1e26db84245ff14c54ebb8c4bd715280346a9abf4250cd45a386419a8a7871a067ed2c4623a57dfe9a7a4b285b3a95c06e7b2a0d0d61a394d07f552134064c1c98be5a5bd24b4e8a9df1a55111c9b4ade5c2df7d7e4cdcfd566c05de9b75653140cadc36a593c595f58b588ef76a5a5f9e3ed47595c84cd96babf8c41aebcd6c6dc6137aca08112aa72de811eae9946ad4bb23d137625de06b38d875b75d67ddadee01af4b1b6d7d9231212188f7f0e3eecd1fd90d4cfe248ff4ddfdbd0da91153636b420d2b91862c5b2e7a7a1ffd4d00ea203732df8a1dce8dc4970bb4f6caeeacce04e49624119e87c9b7a8dd635d8b46118b8c5fa8e6441c3308de2a40030e48af1f94a6fb10a99e3b9127ab0d15e4eebe63f14d7c52b91d80b439798fcbf0f0166b87ea3d14d9a4fd11eb6c32dce37925be0511058cb7ed32dc0f367ae9e75c1ba11164c2d46c1e99a81b6a1ea94584bb5520605653bc878726b34a71997582738e264eb55a454b2fdbfddc53941a90b96efeec02ccfe2bc1711f2a51de158a8093705c597788bfa2f87bd69ec4dd6e32f51e71e311eaae609b7b46946951fad3dcd2b939ec164a19fa4f85872134fc8f9898a2f6d70457afe1968e59bf711f1e1c9fa28b2960d3824ef13f65d58d81a95a818e1b626c0c16860c560900e32e4d336187a01aa0b625edab86ac389c781171b78654ca7cfd0cb4956dd32f8702156003d4fba6c3e9524d5d67e224842e9a39933b0cd1df4ff8579a1c0271396427642751aa3fa501015423a2d1a4f25219fea0f2752adc78b29f15fdc423b41e17f909e09751d5349b791e1c8e7b6bd27ab2ee3e1bb3d42d2e115518d63dcf2108dfb511adaa3f754b449705cba5031042b5dff39459e087e5b9546e7cbb8147d7dd137bea9d464a531dacb5eabf5940988ef513f02af7dee0d6ffc7f2378337ca05406cfc81029000726530f4792c31785129afb68f581b28b470b4b6c7ec1132352b5e38eb625ce5a64bf0edf8fd4594b4e5eb7cf6d458979c39bfabd39ca1fc746393b9c390551d016fa0c0ddbb06008495bf680b52792bdd4a126459269d275c8c2504e7fb9d1f94ac8551c2fda6db22ad02f88b9aa1e6105b06793688f070a86424c2382d0ec973769869035c599b5a44b26e78cc6a980d09196cbf50c057fe95c40413b2a62f5b7d795b5069c6a9a359b1c7db6e093c7aa35e1f9cc41af10e59e94ec55110bf55bc622eba2b8e85f92c316466c8bf2985bd27d0bb95197cc99f1c086dfdde98d126864b6034a705dcee1808a18a79266353269ed21c75e1aaf2b8e85d489086fb41", 0x1000}, {&(0x7f0000001bc0)="bb3e8dea6696c0b80889b6b3bdd6ca6afca0bf9ea0de09fcdb88f72691c348d158a57f30212e2a361724cd05d19ccf02837ed905113e6304", 0x38}, {&(0x7f0000001c00)="1273d8838941cf961ae647a4a472f1f19947030a12d88ee3d33eceab7e566c737b62d1349855b636bfff82fc083eaa7eb5230644c2e11cc37bc5392b585e1defd74fc0dc06b7324af23780872f444494d6", 0x51}, {&(0x7f0000001c80)="4d32a98dfde1e5cc0f2ef2574394b551093861310f84e98f8011be5ac4c851a9e3537f27ad7754588ac4c0579ae28683a4ca5f53844a66bb2d144a675972bfd4671e52f3ad4bd6710a67ca144d278ecbc20eaf181cbc1547e5e5b07eaecfebaa007f4ca00fbc866addd626f3447fe1a10aa49628d0e80e6cbc8a77a1db14185b4059c41d42fc1341ff2d54ce4eb8887bcd7a3e559e923437", 0x98}], 0x9, &(0x7f0000001e00)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @authinfo={0x18, 0x84, 0x6, {0x3ff}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xc90}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @empty}}, @authinfo={0x18, 0x84, 0x6, {0x3b6}}], 0x80, 0x20000000}, {&(0x7f0000001e80)=@in6={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, [], 0x19}, 0x1d0}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="1d376e5f642351caa610fe420776d0a867422f00b1f5b92896fb9378a7b3a6ae85f1431785624504778a5d5354332e23bc4af01f895acfa256f90f78a660bdbd3488d18a1e305306491913a68a2fa2d4af70dff22baad1b2a05bbc0b943b08b8a90d", 0x62}], 0x1, &(0x7f0000002080)=[@sndrcv={0x30, 0x84, 0x1, {0x8000, 0x4, 0x5, 0xfffffbff, 0xe30, 0x5, 0x5, 0x2, r13}}], 0x30, 0x4000010}], 0x4, 0xc000081) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r0, r1, 0x0, 0x102000002) 08:30:49 executing program 5: 08:30:49 executing program 1: 08:30:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000040)={0x713, 0x24, [0x3, 0x3, 0x1ff, 0x2b0f9f70, 0x800, 0x6, 0x1, 0x7, 0x7]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:49 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) pwritev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="010ee068822128f226e6f436f048b56d64d3b904e4a7970148a85d747924c095400899246644a1445731d31d3f99af68e81eaa46af1ee21b55979de57159849db85d4a90e68d05f622d65b38f129f04144b03c31067976e685a529b4027337586814c86b6339dc0a26ee3d347c13c85014a5473de8b594dc43402f61093e9b73463ce5e7df6a", 0x86}, {&(0x7f0000000100)="1f48d68d265425351dbb016295438ee13c4a1fda3c76ae9bf7084e0df0919d43ca264695b62880ec1e049adfc4072be5f6f709a53f28ffabbe309e9e47a31d8bd6da81a136ae5149dc7a4f00445121344ac367c2c1a465a3eb4b475a08ebe99fdfa0ecf34805f26e846125c0994d675e4294fab34230e59254b201d6a543f36c1af7d27004c05878210f18c2e07cfaa172cabb4a9619a432f9b4f1599768fd17424f735edaa54ec70793c0ad2e80103d6678c5ab5841dfca060ab822d72edd8e12c556c63e", 0xc5}], 0x2, 0x0) 08:30:49 executing program 5: 08:30:49 executing program 1: 08:30:49 executing program 5: 08:30:49 executing program 1: 08:30:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x11) 08:30:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000080)="c02496ab9b5fc7b095092b176aaa4a257bda1e597e482ff81868cb4623803eb6310bc8e6f2f2a15303e30e2cdb48c131ba71639a2951ffad06d031ec0e68b9edceeb642e234c5a4530ef89f063475fdb02cbbd196f536c3d3286ec2a5372da517fbd0fa6d637d33a003ccf490bad5c100211ddcd1ef7d93793cabd728513ef9c63168b5c90598bf2a2ddfdebc161f9146c80a5b719d2d49019f4f631de8f8145006c070dc17f7c75e58ed12205859cc898138f7a391ee97ee1070b4e3dff7eb50db661249de9d5f92957484bf5f0c243c29620b244", &(0x7f0000000180)=""/248, 0x4}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000140)={{0x3c, @empty, 0x4e20, 0x3, 'fo\x00', 0x2, 0x9, 0x7e}, {@multicast2, 0x4e23, 0x2001, 0x2, 0x1, 0xfff}}, 0x44) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:49 executing program 1: 08:30:49 executing program 5: 08:30:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0xffffffffffffff55) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@loopback, @dev, 0x0}, &(0x7f0000000400)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r16, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7400000024ef7700"/20, @ANYRES32=r16, @ANYBLOB="00000000ffffffff00000000080001007166710048000200"/92], 0x74}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r20, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r20, {0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}}}]}, 0x74}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x28c, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1ac, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x4, 0x95, 0x2, 0x401}, {0x0, 0xed, 0x80, 0x41}, {0x8, 0x5, 0x1, 0x2}, {0x5, 0x3, 0xd8, 0x65c}, {0x3ff, 0x6, 0x3, 0x5}, {0x35a, 0x5, 0x2, 0x1}, {0x9, 0x0, 0x85, 0x1}, {0x20, 0xc1, 0x7, 0x3ff}, {0x65e, 0x2, 0x0, 0x80}]}}}]}}, {{0x8, 0x1, r20}, {0x70, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x9, 0x5, 0x40}, {0x4, 0x1f, 0x20, 0xfffffffa}, {0x5, 0x9, 0x1f, 0x1de}, {0x1, 0x20, 0x3, 0x36f}, {0x1, 0x9, 0x8, 0x2}, {0x8, 0xf8, 0xe1, 0xffff8000}, {0x7ff, 0x9, 0x5, 0x6}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r21 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r21, 0xe, &(0x7f00000002c0)=""/196) r22 = memfd_create(&(0x7f0000000040)='nodevmime_typeem1\x00', 0x0) pwritev(r22, &(0x7f0000f50f90)=[{&(0x7f0000000240)="e8d3f5ed2a9ed779f240d5329bc2e736007e44208e1de0780a19e25c9d34a76925ba0de028e7302a07cb8bd4999e4b07a64a2761d26f27c881ea652d77b31b657d", 0x41}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r22) sendfile(r0, r1, 0x0, 0x102000002) 08:30:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x1, 0x1, 0x2}, 0x3c) r1 = dup(0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x5, 0x58e, [0x0, 0x20000080, 0x20000274, 0x200004f8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9e0ad47cdaee9b22, 0xd842b2906981a857, 0x0, 'eql\x00', 'ip6tnl0\x00', 'veth0_to_bridge\x00', 'dummy0\x00', @empty, [0x80, 0x0, 0xff], @local, [0x0, 0x7f, 0x0, 0x0, 0x101, 0xff], 0x6e, 0x9e, 0xe6, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5a, 0x20, 0x7ff}}}}, {0x9, 0x18, 0x8847, 'hsr0\x00', 'vcan0\x00', 'veth1_to_bridge\x00', 'lapb0\x00', @remote, [0x0, 0xff], @dev={[], 0x27}, [0x0, 0xff, 0xff, 0x2350278b02a5d4fc, 0x0, 0xff], 0xae, 0xae, 0xde, [@devgroup={'devgroup\x00', 0x18, {{0x8, 0x101, 0xffffffe1, 0x40, 0x2}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x155b0, 'veth1_to_bond\x00', 'yam0\x00', 'veth1_to_bond\x00', 'ipddp0\x00', @remote, [0x1fe, 0xff, 0x0, 0x101, 0xb55d1573f7f6a299], @random="7bcb1ec507bc", [0x0, 0xff, 0x1fe], 0x6e, 0xb6, 0xee, [], [@common=@ERROR={'ERROR\x00', 0x20, {"c8a190e3c778ccab9afc8326d55ba41d5fd942708bd17a51164897c2c160"}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}}, {0x9, 0x25, 0x9, 'syz_tun\x00', 'hwsim0\x00', 'ip6gre0\x00', 'eql\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x9973a40b449af94a, 0xff, 0x0, 0x6a9ca2b9c7a15f1, 0xff], @dev={[], 0x13}, [0xff, 0xff, 0x0, 0x1fe, 0xff, 0xff], 0x6e, 0x136, 0x166, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x6, 0x4ca0}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x80, 0xfff, 0x1, 0x0, "b10c1f866a6cd1ab669aa07aba5c8decd14fadf881d92abfbe757d92a39a43e30ca4e57277a8a80bc60bb4d7db8689a134e5eaa33bc0cd3532c5f8f610d1fadd"}}}], @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x4, 0x1, 0x1, [{0x9, 0x0, 0x4305, 'hsr0\x00', 'ip6gretap0\x00', 'lapb0\x00', 'hsr0\x00', @local, [0x559720dbdeea4656, 0x0, 0x1fe, 0x0, 0x1fe, 0xff], @broadcast, [0x1fe, 0xff, 0xff, 0x5d3289073a43b38d, 0x0, 0xff], 0xae, 0xae, 0xe6, [@devgroup={'devgroup\x00', 0x18, {{0x2, 0x987, 0x4, 0x2, 0x7fff}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}]}]}, 0x606) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x3f, 0x40) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000700)) 08:30:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:50 executing program 1: 08:30:50 executing program 5: 08:30:50 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/ddv/input/event#\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) dup3(r3, r2, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/187) 08:30:50 executing program 1: 08:30:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000000c0)="89206473f785722e92fd1722d6317caa8c627389e1cc91786c0ca5fd4407cd1485828cf72c5417355ec1e169bade76522b0743d6781bf2106e6e00eddc6fb3f7e00c58f7f4a526c74f3045b0d7c78cf3b052b32ae401210fee6f9f8de46c2cfe4284bbf68ad852a448a9fcd49c13bf9f56fb4431a92fae640d9562c25bdc240ffdc1acaccb80bc2064f30d5e07125538258506d6ff11996aee", &(0x7f0000000040)=""/56, 0x8}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:50 executing program 5: 08:30:50 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x17, 0x22, 0x4, 0xffffffff, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 08:30:50 executing program 5: 08:30:50 executing program 1: 08:30:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x3f, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000000c0)=""/172) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/187) 08:30:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000340)="0be6899a34d3c19e72a05f1d047cd3f91a4cbd62667afae1633fe8eec1e0c838f62b9c4ab87a95484bd07b74799f7cb12cd2ed07fac5ed75feef815446b47125c8330bed235d53ab064475fe4670b95f0ad12c422690a1c0695a666aff4fe4904ad6162cd1b6e0ce62d4070000008dabeb678275ebb3c4129b72c520c0b9b99b5a82e3afddda67e151c79750208e4916ac0600536804dd4ead6de38afd21fef8de368b250f68a8b4d48be34d322ca45c4ccb5bc45651e4d9ef0b411d642e7ff53d98a06caa6585eff9d75b419db1c892e4cafb0b71496d80fe9dd8690e4bbf5f47f63bef2a55f3f6", &(0x7f00000000c0)="d3759ec9d903c4ffec02f56c0ac0993e16dd5602835a777693ac7ad9e19b613ce2710d41566ac5e9de5a899de040337fd3d363e44b93255a4858588ae589ab0d008f49bd6a039ef0542f3e4f8f35d57b084f68f219bb35c8f18a6d24a5ee6fc457655c5357fb8b6d57a14d2080730ac4d047aae8d7b27838561d859252780c061d65ed5fecddbf25f16f94acd975a2d61d85f7adf0e1ced145d7e0881d44358de50dbcffe57a18f3c55c2cacd96f5b7ca08813c86209b00836d7", 0x8d9e8ee62fd48a7c}, 0x20) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1ff, 0x400) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 08:30:50 executing program 1: 08:30:50 executing program 5: 08:30:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmdt(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x100) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$SG_SET_RESERVED_SIZE(r8, 0x2275, &(0x7f0000000200)=0x40) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r10, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r10, 0xffffffc0, 0x0, 0x0, 0x0, @ib={0x1b, 0xa931, 0x5, {"e184c10bca320125ad0479f6072b06f9"}, 0x3, 0x200, 0x180000}, @in={0x2, 0x4e23, @rand_addr=0x4}}}, 0x118) 08:30:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x0, 0x1, 0x0, 0x9, 0x3, 0x3}, 0x1}, 0xa) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:30:50 executing program 1: 08:30:50 executing program 5: 08:30:51 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'lo\x00', 0x100}) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x20000) 08:30:51 executing program 1: 08:30:51 executing program 5: 08:30:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x10, 0x22, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:51 executing program 1: 08:30:51 executing program 5: 08:30:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) pwritev(r0, &(0x7f0000000a80)=[{&(0x7f0000000500)="e86b9e79605825a1a5b8ce6933fc1c519526415500209518efa0ccef0aab6d8f41668505fc339c10a38acff25d62f44a8ec2d897a7c1f974bec86341fe3991dc8346d513eeb96757d5c7c2aa340d620e2c2478d6ba5a8283b694af098de4e20fa9e7365dcb852605037b297639cd7f04216200645c718576a81183699790cfd1bfe62f4af080e4984e8878b8", 0x8c}, {&(0x7f00000005c0)="d4ef524185b9b2eea1027f9b4d2f25c68d4ddcd28e22da4f93ac2bf63cd0dd4aa774c055268b8713891d4b007661e9d48de0aa37327105691bdab93c2c84dec4075444e7091deb9eff4711b71846eb12e35e89ee4bd0d4b4ba9bc839619294c57a8928bf9fcafebb3d22e5a2d160fa04170e8e0316d96f73e9b38ba1c4c70e296c257c30724fc0e8e65a5f653e561426061b1203cb0c234bfd7891f2bde873cc5a34f42d5e08615029c86a06f1d7d48376af4f778d4cfd61938dac5c6b3b0e9fad1167505bc5aa49bc4b13dc33d4a7ef746883", 0xd3}, {&(0x7f00000006c0)="1d4646cd6569d4560a4f2d703d83b65b0873e5d9ab0370b7aef8aa85de187c4ce2a5e09f814bf13cdeb1c1753de5e3f18dd3cebd3a773b38761d79b1b5933d5776016ba7947e989e8774fd250689c7cb877c0666aeea7cb10937f39c60f3948f13f38691fd31e014c8f01bec1e1d6364de52e5d8623a018c32101e0f1a24cc6e47bb712e6de5bb12e5d12a50471d08c766437c5b039cb3eea4e466954ab747b9cae12f07e733c8fb054a1d035aec78b058f5d299e497497d784572", 0xbb}, {&(0x7f0000000300)="1165cecbdd9a51dfd2ffc6d9249bc61fcb159b4b3cbe67d23977d79674198e", 0x1f}, {&(0x7f0000000340)="6ac65d7bc08c2035c153ab98287dd9da725d8af8f38c7d381c9a8719afe0b1b4ea4cee74197c0f30", 0x28}, {&(0x7f0000000780)="9aaad9c2a2513635e69a547480c3999194f5437fe9f8181770a89d61d3acf8866d5e75bf3e465664a802c24a2acebb34084b50d39d59e5a89580e5ab499b844a9d2a8b4e98d9f9b8ff569d0c7c80961de45b63544cf28c7f829025244a310d58569dc44f0614899b971567c971e49ab0021b680ee34976a16e501ad80c60060071519fdd", 0x84}, {&(0x7f0000000840)="bdf1c9bb14e0d9731f0723d53fe217f9efa851406c90384c5827eb7143cfcd53ff7b085e94b2cf932bc83b8c5d7e1973d08bd5111b2842809ab7853f3dfd04cd12ef526a26be12aa38ae8911efa0ca55e705f7c965cd3d511f9dd92d6105e4a7e9421e92ec1b3ad962399b3e56484e5b11159ab8548b6289c00449222f729cd1a64dda57d32456f714969d75e5e6ed4eafc7d9583de74d1ece85c2534ce03a21e181769975365622a7d6e5ebc1bd9fd9e310046dfd58ca7bcc9b59a6157ee61530bb71b4ba53380fedcd5fab476cdf20c71e692bf416ccae065b6711be5cc0d8652b8500ddd242db93", 0xe9}, {&(0x7f0000000940)="1131abf4281ce306a3a822a50fede7ff5a9cb61734dce58c52", 0x19}, {&(0x7f0000000980)="b8b5058ff65380c891526f61599b54d6982590eba1c65f1e609e92cef176c72ce8b81a800056c253e5fcade8725da3ea7f49e69ef13bd0ff4b32c6d69e4e39618fb4db52ad84b876fc80d40e7d0b903dfa7fcb92d955e346b1eba2aab70ab1a3e76a5520e72be713afd076e78df16558dcbc2613efaf3e21f4f5ade336ccd1d427f6245b87fe3d7a6cf82dad579afd7b93dab6688b80312a0c169a12cf157ec1375d1bc97cb7a7979da10d96cf368a01bbcf54bec6341b29d2d79d81a61af352947b7c0b5a00cad5894a3880e4ab4cbcaa97a6214e98a21506", 0xd9}], 0x9, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={0x0, 0xff}, &(0x7f00000002c0)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x18001, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000e00)='\x00', 0xbb0c8bd9cb457b3b) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @loopback}}}, 0x108) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r6 = msgget(0x0, 0x88) getresuid(&(0x7f0000000b40)=0x0, &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0}, &(0x7f0000000cc0)=0xc) r10 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00)={0x0}, &(0x7f0000000d40)=0xc) r13 = getpid() rt_tgsigqueueinfo(r13, r13, 0x16, &(0x7f0000000200)) ptrace(0x10, r13) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r13, 0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000d80)={{0x5, r7, r8, r9, r11, 0xa4, 0x4}, 0x9, 0x9, 0x4, 0x1, 0x400, 0x7, r12, r13}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x802, 0x0) r15 = socket$inet_dccp(0x2, 0x6, 0x0) sendfile(r14, r15, &(0x7f0000000240), 0x5) sendfile(r1, r3, 0x0, 0x102000002) 08:30:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0xffffffff, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0xd8d0bcdf96e7f9, 0x6}}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r13, &(0x7f0000000100)={0x7, 0x0, 0xfa00, {r10, 0xff}}, 0x10) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x21c002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000000300)=""/24) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$dupfd(r7, 0x0, r5) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000200)) r8 = semget$private(0x0, 0x2, 0x2) semctl$IPC_RMID(r8, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)=0x1) r9 = dup3(r0, r1, 0x0) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x10000, 0x97ce, 0x100d, 0x6, 0xc, 0x0, 0x2, 0x4}}) 08:30:51 executing program 5: 08:30:51 executing program 1: 08:30:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x67fd000, 0x4, 0x5}, 0xffffffffffffff41) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000200)) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000300)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0a600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf1253c4d115c9ee71e627f82d77baf9e4c4f3") ptrace$cont(0x20, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/netstat\x00') setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000000c0)={0xdab8, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) setresgid(r3, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, r3, 0x400) 08:30:51 executing program 2: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:51 executing program 5: 08:30:51 executing program 1: 08:30:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000a40), 0x14) read$eventfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x5f690a9e90641ec9, 0x0) 08:30:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffda0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0xfffffffffffffeed}, 0x1, 0x0, 0x0, 0x2}, 0x14) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000040)="2ce0a36039b2286d69c9ec2f1debece2d8236cb1a67c8b82294a6876a524b712e2a35a94f06c21993435", 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000200)={0x0, 0x8, 0x1e, [], &(0x7f0000000180)=0x1}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) dup2(r3, r4) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f00000001c0)="100000400300000000", 0x9}]) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xb92f, 0x200000) io_cancel(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x42a3, r7, &(0x7f0000000080)="a101493d95189fdaf74e213b7a367364af9646", 0x13, 0x9, 0x0, 0x0, r8}, &(0x7f0000000140)) 08:30:52 executing program 1: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x8b, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) uname(&(0x7f0000000000)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:30:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x24}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f00000000c0)="327cc498d8ff0f152b9a7c908f1255ffa667045aff6c24b875e7965fe9aa3f0eedc266d911f1ae603adca8a51999b6769d6612dc3b75bc022c5c12d5d3d48bdca527e3110dd7f3f0ac695077b1019db7ab9efc4e79c74055b7357d9b0555c8172dbfb14f1517d7dbe710e8b3326d7c573c69ec82a53466650ebd4f19f625be89f2cd77f7fc26d596012b93e46f43e60274b72def873d", 0x96) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) 08:30:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) arch_prctl$ARCH_SET_GS(0x1001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x70, 0x3f, 0xff, 0x2, 0x20, 0x0, 0x5, 0x10000, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0xffffffff, 0x5}, 0xc000, 0x3f, 0x7, 0x7, 0x0, 0x5, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0xc, 0x70, 0x40, 0x78, 0xb4, 0x3, 0x0, 0xcff, 0x8000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x1, 0x3}, 0x22202, 0x7, 0x1c000, 0x7, 0x7}, r3, 0x5, r4, 0x3) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:52 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_setup(0x8c, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '*%\\mime_typewlan1\'\x00'}, 0x19) 08:30:52 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 08:30:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) recvfrom(r1, &(0x7f0000000040)=""/206, 0xce, 0x10001, &(0x7f0000000140)=@llc={0x1a, 0x313, 0x1f, 0x81, 0x3f, 0x20, @broadcast}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:52 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10000, 0xed1919ab1671ac30) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000140)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0)="f4f091851cb584aaf4c64f0d468d82bc8b1fc6774cb195e4fd1906bca2def49c29ce93d34949b2b45877935f74b8c39eb0eb5b367bf3677b9e42a79e579021e8b73600e1bc65117bca941777e4cc01512f4fc2b2d0d284432c158232adade9034b6da5127a2d", &(0x7f0000000240)="22c51e1d"}, 0xffffffffffffffe1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockname$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x4614e4b7) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x184, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x33, @empty, 0x4e20, 0x1, 'none\x00', 0x18, 0x6, 0x65}, 0x2c) 08:30:52 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000041c1, 0x20310, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xbff, &(0x7f0000000400)="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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) 08:30:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000001c0)="100000400300000000", 0x9}]) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) io_cancel(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x4, r3, &(0x7f0000000000)="2d04ced2f2", 0x5, 0x2, 0x0, 0x2, r6}, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r8 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r9 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000240)) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r0, r7, 0x0, 0x102000002) 08:30:52 executing program 0: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000200)) ptrace(0x10, r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x104040, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000004c0)={0x78, &(0x7f0000000440)=""/120}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ptrace$getregset(0x4204, r6, 0x202, &(0x7f00000003c0)={&(0x7f0000000300)=""/175, 0xaf}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r4, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r8, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r8, &(0x7f00000001c0), 0x0}, 0x20) 08:30:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = fcntl$dupfd(r0, 0x80c, r1) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x2, 0x26, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0xa, @perf_bp={&(0x7f0000000180), 0x4}, 0xb7de65f92be3efed, 0xc9, 0x81, 0x5, 0x5, 0x8001, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 08:30:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000300)={r3, &(0x7f00000002c0)=""/5}) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) dup3(r4, r5, 0x0) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000080)=""/187) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x2, 0x1b000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000140)=""/142) 08:30:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x3f, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000000c0)=""/172) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/187) 08:30:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="9250e5d6425dcdcd354b52d70cc3aaf5cf455c82dc4e2009db821ab74b58aa1afd02521592b1c8d1c0d68d949477b822bcdcd2a6d0976c6ca2a93e5a907fd8abe38bb073fd2d7300980fb5e3e78a79787e5011ac9a5e4a1ea861bd9b01b6b77283b0552378e3f5", 0x67}, {&(0x7f0000000000)="946fc5ab8a79523bd4a6eee498ddf264e108d0417f091f", 0x17}, {&(0x7f00000001c0)="6b448be90ded80ad70972adb8cc3f804429678674319ddf0649d65", 0x1b}, {&(0x7f0000000200)="164b43f48128baff3d023cfc5879f0a4c9de925c3b0835aa8e01e99d04fe4311f841cd3aa56badec636b209f62d1f987fbad050bcd8a2bb5ccc2938cdf457036a32ba65e810e2928997100fc163f198de85c6c471aa7dac9b3ce6e53d96f5cf91166e9c9b25be8235c6b2573fe644f", 0x6f}], 0x4) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r0, r2, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/187) 08:30:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x22, 0x4, 0x200, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendto$inet(r1, &(0x7f0000000240)="eabeaeaa9236281782c2d53f4ed54733bd1b4bbf32d307e0c258872fb81e5f2099f085df75db229fd595e9b1e27605bc3b85c28ccf22c9e5cd72a575f4ac3a65c2edc8294d85d1c04bf4211d1d2052483c06bb46c57e8dbc043ac613b557ec8b4de60e96eaea441658e832b43256748824a69c8c3639267b6f47a8b0823f26d2d161ee5995226f05d1d5b944338756f840055979d27164b2ab0e4c83f951a8276755d3544d2b194f3cf8090007cff8dfbbf92ad24d2f6b78e88bfbe21a882dc5dd9d1a40234fa740494e9dc6db0e09add3f5f9781c2e471e933c8b4a0120100078b75681c2b4a771fe", 0xe9, 0x8080, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:30:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)="8fdbe66115a316df763d1df484db500be62ee2cab517eff55deb99b4381638b1774c980f7d4e514a8acb895ab6fd", &(0x7f0000000080)}, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) prctl$PR_SET_FP_MODE(0x2d, 0x7) 08:30:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x88) dup3(r0, r1, 0x0) fchdir(r0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x7, 0x20000001, 0x20, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0xfffffffffffffe3a) 08:30:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'cpusetposix_acl_access*'}, {0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, {0x20, '/dev/sequencer2\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, '$em1.)mime_type-ppp0^9nodev'}, {0x20, '^*,('}, {0x20, 'trustedvmnet1trusted-'}], 0xa, "e3a09d5e7a85a7474f5f450c98c6060ed772a32d832e9259de07f5b3a1d40f993f89d2b5fd646142636c30cec197ebb2a047ae7356b417bc8d3df93f3c21de2c831e065ddbe00ed14e2f5b48a6168cc6928bcdcb5df898b74bab8c0367edbd3e76bbcfb3adc33f569b7902f48f586ed1fe32cda59274a7f06bc19fd0"}, 0x102) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0xa, 0x6, 0xff, r7}, &(0x7f0000000100)=0x10) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) accept4$vsock_stream(r9, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r8, @in={{0x2, 0x4e23, @multicast2}}, 0x20, 0x11, 0x5, 0x8, 0x8}, &(0x7f0000000180)=0x98) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000000)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendto$inet(r1, &(0x7f0000000240)="eabeaeaa9236281782c2d53f4ed54733bd1b4bbf32d307e0c258872fb81e5f2099f085df75db229fd595e9b1e27605bc3b85c28ccf22c9e5cd72a575f4ac3a65c2edc8294d85d1c04bf4211d1d2052483c06bb46c57e8dbc043ac613b557ec8b4de60e96eaea441658e832b43256748824a69c8c3639267b6f47a8b0823f26d2d161ee5995226f05d1d5b944338756f840055979d27164b2ab0e4c83f951a8276755d3544d2b194f3cf8090007cff8dfbbf92ad24d2f6b78e88bfbe21a882dc5dd9d1a40234fa740494e9dc6db0e09add3f5f9781c2e471e933c8b4a0120100078b75681c2b4a771fe", 0xe9, 0x8080, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:30:53 executing program 5: syz_emit_ethernet(0xee, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, [], {@generic={0x6558, "35730e5b8c6e98fafb7ede3936e8c573562ba3c838a7d8880c50d00f8d4acfe428d61becbd5b22fa193ce3f36eaf72a1207a6a3215ae2a67c7be2069ed8325aa605c156fd58bdc635ab7e0124d689bbc3aad06659f11abb1fa0f64e080f69d3bb65418b539c0b7f07eaef9b186bc2bdc100a55949c1d9c8b310d1cf6a4fad5bc6aa84b36917588f8dd5e41abd8bdd5eaf7153c2bac6aa63c7e4850d635a2f5784eec254bdb1e6014a9dafac735e02ad523c682722f609ea39abefed1c7f027af418e053ee09b06cb8b1420650288778e2b8a7ced1122e4b727db631caba91872"}}}, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/247}) 08:30:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fsetxattr$security_smack_entry(r1, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/system\x00', 0x8, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = gettid() fcntl$setown(r2, 0x8, r3) 08:30:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) migrate_pages(r1, 0x6, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @empty}, 0x88, 0x0, 0x0, 0x0, 0xf414, 0x0, 0xff, 0x9, 0x81}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:53 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)={0x8, 0xe1, 0xf0, 0x0, 0x8, 0x6, 0x15, 0x6, 0x0, 0x7, 0x1f, 0x1, 0x0, 0x4, 0xfffffffc, 0x4, 0x4, 0x40}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) dup3(r4, r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000140)='/dev/usb/hiddev#\x00', 0x0, 0x0) dup3(r6, r7, 0x180000) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x7) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x480) 08:30:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESDEC]]], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x71, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d4a0a13fc833fbb724b6778d0006450eeab88c525717638193a6eade1404dea09ec1c12f0c2a7fb38bdac25bd65ae2dc381cdf62aef5e628caa465046eff628"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x18801, 0x0) write$FUSE_OPEN(r3, &(0x7f00000002c0)={0x20, 0x0, 0x8, {0x0, 0x11}}, 0x20) 08:30:54 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x2, 0x1, 0x18f, 0x1, 0x6, [], 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = accept4$tipc(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000240007050000000000000000000000001664f1d7e8a0cd4c41c6255b13b8d2445aae8d94c00b07e59417c123c5a0d7335c6bcf1a4bf4b1682608f234adc4cbefc099a98940d404fc6e4c9e7011b93b9b3b4b5bee36", @ANYRES32=r12, @ANYBLOB="00000000ffffffff00000000080001007166710048000200"/92], 0x74}}, 0x0) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newtclass={0x80, 0x28, 0x3, 0x70bd26, 0x25dfdbfd, {0x0, r12, {0xfff3}, {0x3, 0xf}, {0x7, 0x9}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x4}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qJq\x00'}, {0x3c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7f}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x800}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8000007}, @TCA_QFQ_WEIGHT={0x14b, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}]}}, @TCA_RATE={0x8, 0x5, {0xf9, 0xf4}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gre0\x00', r8}) 08:30:54 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0xf3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="b7e686252ea9aecfad37b07aacbe7fc51198a2f9ff6bdf79b154020426e66b4791237a72e5f437fb1a88f6c0aa456c1268e4ab27dd800e4218ad0868d59be3777cbb031e2059036ea0f324ad052b8f4b5e4e00029a9cd642a56e63827a2c2415c2945429f0b6a89735c89aacb428d9345171d3bd1de1809fde2b6a0d053700434d497e73d8d69a7e45584537f799739cbe7a9d3739b2c5912197d5d98ad44e2850aeb77aa6104c5eb727cccbfd01daea91bfd997c72805d29f6b3720d1740debcc9aa5040fa6e7e6741ccb52a293398c7160f29706a5588271b8e4ea6525a3af86f05144492d54a05512f580d596d40a9c779a8ac6366658706db97aa6b6108b") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 08:30:54 executing program 0: openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f00000000c0)="e9ac6bdea7386406cbcf426fa61fb69fee950bb385c71ba81e58e9ba759c2c8bd15e58bf545dafc21a0b7406ec455723eaf29a5e5cdd3665473dbb72418076e2c229ff281ad19735a42e6ea039ed4889cc841156a70e2fda5a65ee31652353050a7e7c016c388cc048460b471035e450b745fd469f6bc2aee48283", 0x2}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f00000001c0)=0xfffffffffffffce3) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r5, 0x5e50, 0x6, [0x3, 0x1f, 0x6, 0x4, 0x3, 0x3]}, 0x14) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") timerfd_create(0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:30:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x401, 0x7ff}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x0, 0x0, 0x3, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x40000) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000140)={0x0, 0x6, 0x7fffffff, 0x0, 0xe, 0x0, 0xff, 0x1, 0x100, 0x3, 0x1000, 0x3}) ioctl$RTC_AIE_OFF(r8, 0x7002) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) [ 404.797630][T15567] ptrace attach of "/root/syz-executor.1"[11781] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ   ÿ\x0b  @ = [ 406.348379][T15664] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 08:30:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002340)=ANY=[@ANYBLOB="12010000b954c910c4107a80300b0004000109021200010000000009046f00005a80f100"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x0, 0x0, 0x2, "d247"}, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000002c0)=""/95, 0x800}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") read(r0, &(0x7f0000000100)=""/77, 0x4d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='vmnet1.\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 406.708868][T15694] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 08:30:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f00000001c0)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/167, 0xa7}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2019, 0x2, 0x2, 0x5, 0x3f, 0x1}) 08:30:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe5b8, 0x200080) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r0, &(0x7f00000000c0), 0x10000000000001d1, 0x10000081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) [ 406.842303][ T4032] usb 4-1: new high-speed USB device number 7 using dummy_hcd 08:30:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x1, 0x8]) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x40) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:30:55 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}]}}) read$FUSE(r0, &(0x7f0000000440), 0x1000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x500, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x103, 0x6, 0x1, "6c5f97fb3b5ad47b73b7a38706315b88", "72207dcf8bb99c28f4cfb399cca3e550f75db8ab364659feb1aa4e8a7c67af312cffdf1a77223ca018e364f71de1a52939e0dad599609787c6eb5982e294b737311390ef2c6804c8d7a09b23fe72a7c3339f08315e41854a3899cd6d67b09439d66042f88846fa2ecce194e5e7050fdbf581c64d131e7ed2c7581fc1d0ddcb715ab1b481b35e0ea18917e0228705e396c0c00e680f9f11e7c36d86df9940ba03e06854c6bd1852faabc90ef00b0eb2a4ff69540caf4332e436a57aef3f1e90cf82c0083630bf9e568816e3673761a349df17bcef4b6ef82ccc4068cc17fdcf516ca691cd9719846319435e7c76e2"}, 0x103, 0x1) [ 407.083850][ T4032] usb 4-1: Using ep0 maxpacket: 16 [ 407.097722][T15676] debugfs: Directory '15676-8' with parent 'kvm' already present! 08:30:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2000) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x81, 0x80, &(0x7f00000000c0)=0x8}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000140)={0x0, [0x5, 0x3, 0x8, 0x0, 0x9, 0x100, 0x8001, 0x100, 0x7fff, 0x1, 0x3, 0x10, 0x1, 0x0, 0x7ff, 0x9, 0x1ff, 0x3, 0x4, 0x61b7, 0x98de, 0x3ff, 0x1000, 0x7, 0x8001, 0x2, 0x101, 0x2, 0x0, 0x5, 0x81, 0xb83, 0x0, 0x25, 0xffe7, 0x2, 0x20, 0x3, 0x2, 0x9, 0x1f, 0x18a, 0x200, 0x8, 0x3f, 0xfff7, 0x7f, 0x36], 0xe}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0xb) 08:30:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @dev}, &(0x7f0000000040)=0xc) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 407.202690][ T4032] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 407.211003][ T4032] usb 4-1: config 0 has no interface number 0 [ 407.313341][ T4032] usb 4-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 407.323135][ T4032] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 407.331280][ T4032] usb 4-1: Product: syz 08:30:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r15, 0x40044590, &(0x7f0000000080)) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) [ 407.420577][ T4032] usb 4-1: config 0 descriptor?? [ 407.476852][ T4032] cp210x 4-1:0.111: cp210x converter detected 08:30:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f00000001c0), &(0x7f0000000200)="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"}, 0xffffff93) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x82500, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) accept4$tipc(r1, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) quotactl(0x8000, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='mO') 08:30:55 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xf6, 0x6c, 0x27, 0x20, 0x572, 0x58a5, 0xbb89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x3, 0xc3, 0x24, 0x29, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x3}}, {}]}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x8, 0x140) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000080)="d1380a4bb976f7a9631fdbfdcf57c8a86fa386ea828fcccc182b462bf86c7f045ae4e163b7297cfde177a668bf6e192e232de00598826110532c83e0d6d8acfcb85d2bac320d344087070f9a1a72a2cdbf0701964ef05c6d945cb6056b980041a6f9b0fc1d90c2d47e2d03a36205f825df4d5fd2497c4e01e86f04e7b4498bad7aeabb38878594383a30cd228ab4e3086bb3a24009d5f16627ca73dbc054cc9ecb79662e360a7dc5f05007988fd55e0afeeb51eaaa330f62df8138d0fa0973c81c34cbb548db452a3ea7b2f23788ef30") 08:30:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendto$inet(r3, &(0x7f0000000000)="7446b0843072b69bf9a86cb9287113ea64fae40f9b4d5ff9e480d9e4b3cdbd06fde7c5e3e253be9ebb9e6e1b27be927a04e7a88895978a4601df", 0x3a, 0x84, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 407.942254][ T17] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 408.122465][ T4032] cp210x 4-1:0.111: failed to get vendor val 0x370c size 15: -71 [ 408.130426][ T4032] cp210x 4-1:0.111: GPIO initialisation failed: -71 [ 408.160078][ T4032] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 408.167497][ T4032] cp210x: probe of ttyUSB0 failed with error -71 [ 408.182219][ T17] usb 2-1: Using ep0 maxpacket: 32 [ 408.216536][ T4032] usb 4-1: USB disconnect, device number 7 [ 408.223801][ T4032] cp210x 4-1:0.111: device disconnected [ 408.302368][ T17] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 408.310818][ T17] usb 2-1: config 0 has no interface number 0 [ 408.317372][ T17] usb 2-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 408.328161][ T17] usb 2-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 408.338940][ T17] usb 2-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 408.522472][ T17] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=bb.89 [ 408.531656][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.539876][ T17] usb 2-1: Product: syz [ 408.544205][ T17] usb 2-1: Manufacturer: syz [ 408.548851][ T17] usb 2-1: SerialNumber: syz [ 408.554997][ T17] usb 2-1: config 0 descriptor?? [ 408.798277][ T12] usb 2-1: USB disconnect, device number 22 [ 409.072204][ T3353] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 409.312210][ T3353] usb 4-1: Using ep0 maxpacket: 16 [ 409.432341][ T3353] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 409.440686][ T3353] usb 4-1: config 0 has no interface number 0 [ 409.522330][ T3353] usb 4-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 409.531516][ T3353] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 409.539666][ T3353] usb 4-1: Product: syz [ 409.545290][ T3353] usb 4-1: config 0 descriptor?? [ 409.572264][ T12] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 409.584450][ T3353] cp210x 4-1:0.111: cp210x converter detected 08:30:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000000c0)={'ip6tnl0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x14}, 0x54, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x4, 0x680, [0x20000640, 0x0, 0x0, 0x200008a4, 0x200008d4], 0x0, &(0x7f0000000200), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x28, 0x88fb, 'hwsim0\x00', 'nr0\x00', 'veth0_to_hsr\x00', 'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x101], 0x6e, 0xb6, 0xee, [], [@common=@ERROR={'ERROR\x00', 0x20, {"a095f67c8c675e41d77d38fe8e643886546eb72fa859ddd1ea9933481562"}}], @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x19}, 0xffffffffffffffff}}}}, {0x0, 0x1, 0x60, 'veth0_to_team\x00', 'ipddp0\x00', 'tunl0\x00', 'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x181], 0xde, 0x116, 0x146, [@devgroup={'devgroup\x00', 0x18, {{0x8, 0x5, 0x1, 0x9, 0x1}}}, @connlabel={'connlabel\x00', 0x8, {{0x37, 0x2}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x0, 0x892f, 'rose0\x00', 'team0\x00', 'syzkaller0\x00', 'veth1_to_team\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff, 0x1fe], @local, [0x101, 0x0, 0xff, 0x774d102cd7965db0, 0x0, 0xff], 0xbe, 0x12e, 0x166, [@ipvs={'ipvs\x00', 0x28, {{@ipv4=@loopback, [0x7fffffff], 0x4e24, 0x87, 0x2, 0x4e24, 0x20, 0x10}}}], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@dev={[], 0x2a}, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x5, 0x40, 0x4305, 'irlan0\x00', 'syz_tun\x00', 'hsr0\x00', 'ifb0\x00', @random="9cc5cb04f3f2", [0x0, 0x181, 0x0, 0x0, 0xff, 0xa1cac4594112ac9b], @random="7906ce0bbc7e", [0x0, 0x0, 0x0, 0x0, 0x1fe, 0x7f], 0x6e, 0xf6, 0x226, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7fffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4e, 'syz0\x00', 0x2}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x400, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}}}}]}]}, 0x6f8) r8 = fcntl$dupfd(r4, 0x0, r3) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0xffff, 0xb, 0x2, 0x7fff, 0x12d, 0x3, 0x7, 0x0}, &(0x7f0000000300)=0x20) r11 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000cc0)={{{@in6=@remote, @in6=@mcast1, 0x4e24, 0x400, 0x4e23, 0x0, 0x2, 0x30, 0x20, 0x4, r6, r12}, {0x3, 0x3, 0x0, 0x71580a3c, 0x1, 0x74, 0x7, 0x9}, {0x7fff, 0x8, 0x8, 0x1436}, 0x7, 0x6e6bba, 0x1, 0x1}, {{@in6=@empty, 0x4d5, 0x2b}, 0x2, @in=@remote, 0x34ff, 0x0, 0x0, 0x71, 0x9, 0x3, 0xec2}}, 0xe8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000340)={r10, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, &(0x7f0000000400)=0x84) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$selinux_attr(r8, &(0x7f0000000040)='system_u:object_r:ppp_device_t:s0\x00', 0x22) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat6\x00') write$P9_RATTACH(r13, &(0x7f0000000480)={0x14, 0x69, 0x2, {0xa350f76b649c6ba7, 0x1, 0x7}}, 0x14) 08:30:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x102000002) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x80, 0x2) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000140)) 08:30:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x3, 0x3, 0x81, 0x80, 0x2, 0xff, 0x4}) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000000)={0x6, 0x174, 0x401, 0x3}) dup3(r3, r4, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000080)=""/187) [ 409.812307][ T12] usb 2-1: Using ep0 maxpacket: 32 08:30:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000506f2ef96070000000000000000", @ANYRES32=r5, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}}]}, 0x74}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5}) sendto(r1, &(0x7f0000000080)="833071d275f1ad78ad0af68d193ab53afe3b5fb1f71197d7ed7008dbb669ead4dd3736e3443b8967e00a936d5ff0035ab962ad5c262770b82fe1954716ea91aaf6db6dcacf43602ff9c2e8b9f9f350ab702faf689ba7fdb3b371305004bb561253bc1039058c972368809f63d25b11d9f6d7aa5a9c680805f80fb13c2e704d3e061def860db24acdd5cf3c0a7ad343d009dce5fb57d14b7f8f7be3664271c10609214dfbf1bb30b090247505de0c30819f0710b9923b10f52d0e9257bc14370bd79f23e0a12a", 0xc6, 0xc0, &(0x7f0000000480)=@can={0x1d, r6}, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r8 = dup2(r0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDDELIO(r0, 0x4b35, 0x3) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x1f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004840}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000780), 0x2, 0x5}}, 0x20) 08:30:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x10, 0x22, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x3c) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfb, 0x2100) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/79) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) [ 409.842471][ T3353] cp210x 4-1:0.111: failed to get vendor val 0x3711 size 2: -71 [ 409.851027][ T3353] cp210x 4-1:0.111: GPIO initialisation failed: -71 [ 409.912343][ T3353] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 409.919535][ T3353] cp210x: probe of ttyUSB0 failed with error -71 08:30:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 409.964045][ T12] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 409.972404][ T12] usb 2-1: config 0 has no interface number 0 [ 409.978640][ T12] usb 2-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 409.989490][ T12] usb 2-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 410.001098][ T12] usb 2-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 410.022371][ T3353] usb 4-1: USB disconnect, device number 8 [ 410.029511][ T3353] cp210x 4-1:0.111: device disconnected 08:30:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet(0x2, 0x5, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x7}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x7, 0x20}, &(0x7f0000000140)=0xc) 08:30:58 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002340)=ANY=[@ANYBLOB="12010000b954c910c4107a80300b0004000109021200010000000009046f00005a80f100"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x0, 0x0, 0x2, "d247"}, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x6, 0x97) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}, {0xa, 0x4e23, 0xd5, @dev={0xfe, 0x80, [], 0x24}, 0x3}, 0x4, [0x7, 0x81, 0x8, 0x3, 0x19, 0x2, 0x34, 0x1]}, 0x5c) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) fstat(r3, &(0x7f0000000140)) [ 410.223916][ T12] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=bb.89 [ 410.233135][ T12] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.233197][ T12] usb 2-1: Product: syz [ 410.233269][ T12] usb 2-1: Manufacturer: syz [ 410.246053][ T12] usb 2-1: SerialNumber: syz [ 410.296222][ T12] usb 2-1: config 0 descriptor?? 08:30:58 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x22, 0x4, 0x1, 0x0, r0}, 0x9c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x200000006) [ 410.526103][ T17] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 410.545614][ T12] usb 2-1: USB disconnect, device number 23 08:30:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r15, 0x40044590, &(0x7f0000000080)) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:30:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syzkaller1\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:30:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = getuid() r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000200)) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r5, 0x0, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1320002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x10fc, 0x37, 0x100, 0x70bd28, 0x25dfdbfd, {0x2}, [@nested={0x10e0, 0x45, [@generic="f1f327a7f0e8b1815d41dff79dd9c5802417ce555b4d12cf379a0dd59be62603", @generic="b26c5b7bbd108820b60a177982b36dc3e8e51712371d2796a172954a1ad4875748d1776014255e77275053fa242d1b9bf81df301aad559395b686b47367f711a6d2218b1fb682358b09f6aee8265a1b11b2bf8988c1a", @typed={0x4c, 0x13, @binary="353b1a6e8cec7878e7139989623b703096e36f431570f1dfdf673a1ca42df33765deac9537bb44db047ef0e3bafe3c84e70477932f3154e89f26c3888e2743f528b1220da13b"}, @typed={0x8, 0xd, @uid=r4}, @typed={0x8, 0x3b, @u32=0x9}, @generic, @generic="4902fc05bfecb088721bbf28a474ce17d11e95a1d164767c8420b5525d5f807a9db199f466155b2b486f634d88b0eb37ab4829820c47c49f737c4baa812be1bafabc94e545419019a365c78929b159ea3126e43db89de68cdbd8eefe1498e2e1220082b210f94935865658330b6bc3eb9fb6f446631db15cec80cedc4e840f5cda8440408056f684f1aaadcaa7396649df69ca81cc8d52f0e52b101f1c111203fa1f23d9c198adf097ee0b34a80ba144e5eab1adadbea87e0ea4e15505fd74d433ed3fd2473c84e3b16194fcba7fea2b45335b97cfd37482e60adf9e32e20d753b3c3647ddbe1557c105c33412d5ebfe0deb55ea538b5e8ff65fc1f3787cf4a8e863e39ca16997f5b04dec336eb27e08614799f60d35519435035f0fa8c0060eb51247fc7c5a5cd0ea00693a83e98bef7d85921d2459d73dab10b52c202fe835dc2a4527ddbf7a379f254f6d5b0ebba435b99ebe1f639731ccd9091944956c8323f73064c5d707b1d65a9de1816cb8d3d549a8739bc17aa677664ef60dd0ebe8026d0c509376ece9f6f95569c375888a903036ad9cfb14060d1161b8e221bb1ab7a352af98dfc570177bcc82b4662ce68a5268f55121add34f0f165c88a32fce5f80e2cea0af697dd747ff49c14c33f4464d5a62ebf938ec0709113367a9014fccf64e868f685f8efef15dc148de8690728432be8d12fa2fc54ef23cadf9e984886f26c51aea6fced30ccfb3d258e42ec58c91d7d40647448ae709310f72316feb1b45d57af53ac8286435b3f748e6c997443a8af2a50c7edd8b3c3efb135c8a53fe09c16daa1b385748ab861033f2a632840f466b84dd0486fd0b730b155404a732bf5eaacfec0a4c8b01ae8d13ac3da2b89802c83b538bd18badfb4001e656846e3e0e88f7edc316dbb4d6a7f80796302cf018975815606542a4d795a42f824725167cee2c15b86cd49b8a693b0cec409ce00b4c7f6ba049057ae01a97474ee70d0578ee9a57342aa84221c74c8ecf8554c646eb520c55fda6244eced0a90e78878edab8e17d2997b5d4b86dcdf3e1b996771b13e25844b90e1079d35ae181b0965ef3563b03911ed0829b474e3dce6e391cd484c2687d72b461d5b0472d171c045fd81358eaf8a51fe4c4b1f99e76a246b314a8ee7720d30702679505bd2106cd8b174807fcce84a1c04e14e6116a76a8e85d4dcc3a1297193c240304dcda091521b0af02798d5273317a268a1db54b4028cc93fc63210eab9aaa6e93226150e9b4155c250c3e8b3ac631e4ccf163db178c6368603499d3cb08d405902ee4c17653ced8128fb485b5b0ffe55049653ce5e335df855de19175ede01fd5bf2fe37100a6e3533042fbe6e7fc4dd36b1d988f80a03a6941cf9b789f4ff1b334913d91a45abcd83c034f530fe7c3565a393fae342ad6cce88b3bf86eb6da28e8aa840c4610fbd85370c08690c5dfff416cd4188baf15040e53a0342d0b3e771c9d4e5107bd84ed3f40c472fd2222e43b736576664ad14c45f202b6534b6db3496b6df1cd437d087d751230c94b461c9530a6388b192a4337c21c76de6d48fd6b9ad99d6e0348bc9a0e1e67cc0e7de733a1679becf5b7f64703745ba540ed57f909d19115a2c1cdc58b85435e92f2545db9a68a73a7ba69a3eacac879c14441564462e5d9fa0d83998be27f521808f8366069d1bcbf52b61716b29128bb143a54f097fb438e04cc90a96d93237bf3cc1362e77c73c9e237df02cda8e128fe332af08bd69d0997282d57aa4f4f4748f94964bd2daa3cb2d239a145f32ba58bf3d9a15f552a2256eb84545fd682d7f2e61528476518928f67799c763a67ab5c274d2879d9917a4a6d3838fce355f457cd47a2f11597f31090433de7e9c1cbf3cbf2b4fbf3511e2b4f75dca8d76fc01961940301e40de126d54d378423aa9ca6289d46c6042ce2542ed455939f1226bc85ccd9d3f671f2c6b0390dc2803c7c56aaff4fa6c774004da2efec22591f563a8bce9c5085a6be9139ee989388abf398b076638631a2bcaeb737278c8b178ea856abcdec4b4326c6489630a41ea4551de4d240758a816bc1cc44698ae30c4f4632f0a031bfc7d78a68ed9e55083d910f162e634b9c91d0eeee756b3d93d9c6f4ef97050718390569ccc10122b22355d776dd0bda11fc824f4286bf57f5f210f5d5581587428b0aa8b4cd15ca4db7a2adb216f999470cfbe6c0a974835e37b47fc844e5b7fa79cbe48b3cd3b19b3247a78b5e8433967054cc4c939291f7d084224d0532632f1d28eb14dab1d4168d49e8010c191047f508b979460dbd14e98a9be795715e52b341e663827589c0aa509dd9221b2adab4f6e005f1fe80c0a35e60911e64c60c11464c9294f1a375a48d0a83f63b8e1dc823c70eaf01c95cd3f2102ee01c9c124bccffe57a549e6af85f8c13f0856a5a4e8be36156b498712c213d50863adb627f396208cfb9c43024f9a6403bc231476289a450f373e2b39a2fe66ccfd4eebf434c3992d94033b7551e074b33f9eae01347890358a38074cb2c4d0dd646dc97d04e39665939507fb1074b4ac5f010cad08fd7385e3aa9eec8ab6ec014fd750c10ee33c6c2761c658735e7a9b8d0bc550311f311e2e72200e27b40f1f01bb2ddd2222606eed985bc9c5c78fcef64878e5274136f693a8857ee8030fe2a537e28da846f3216bc4824c045b2e9100f4befcdfeaf1f9c7e58dfb5011de47b1430c2cec5862343d8e7418c962a53451957172b3d95c26f3dc91236beee9e87f8209bfeeef81446332474f8791bad74a720c8f59ffbd43b0df4b090b4e458edc37cdb4d143c1c6e1935d5ed83cb3c9f2c014f62cddb52f5f212e3875f8575dc8c48d805f3c293e886fc8ea732df5ccf5605907cf20371b965cb4a45fd75b31820442e06da902034fdc124cae811204e4cd15e03921a7dcfe41d5dcef7393cebf7b0d8a15bf7c4d6b342e680d7c19c24609a07ddffdda831000af62b7b257faebfe9f65b6ddeb512059a4656baf11efcca2dae602265adc545cf78cd9231d01176a71298fa29e18534873ff99b3246f7c39a8b24c14519a7991a80d8400ef7cec809c5bbb189ecf34e1a8b265c8d7b68aeaaa0169b121ab5d5cfb8c5afe43085a9487540165270734353565c1ebffab8974015a4b8683f2203480dfe9461b01fd2fad40adb037d49c5cd9e012e8d0773189e31d12d1a2d1beed9d8334e14e9a166391396ae6070449868b67191e37bb16ba910fbcd027294b2e3d080b761c0796b69505d7cd87dc658d0c3aad1116538827b93b9ea3be7d5cc6eee450838975a29ae5097659aea3694144156753775fe1d3e126246abeb38b967dd16674391701220de531791b6e864b75f1433c75879999ffc3ee570365893796573a3c8c864d962fdfd9988bee616c5807f19dcf7c1224177a27032871b2e224fea675c47446dd0ab795787088fc3ffa1b6c0e9c6c88b1d0cd6aec36cd3164efd06674e7d971a8c7dc33da101f43b916b153dabd3940d379bea5386bbaafb9b41d68d1dea4d37bf1b9a14eb7efb6b280953b07d71bf6bc2c8d3b9fb9ffca2a482a01e12091ca4da6df658505e060330666f5ea25a02f87e64512b70cfad0daa9e755f2f6a74d106a7fff4e149a5b926db4a9c65d56899345ef05851138bba0960788f2afe29b55ec8a8f506aa000aa15c721145d8c45c79111e73b78fdc48779ba0dceb140146f5440625da947234470f10f6c313e876a29dd057884b1cb3affc5d89e7e079bdc7a6d6ce05a4341ab8444e84c316143637658f181658a303739478b955c8ef71fbe3d39934093b5d15a327ac0381a8df74adab56ffb8089ab92b1ddb409885b1827979b563d6716d5da5b8f7854b48c4c9eca028ea6646c3b35ffe470ebc4a3b20d09514340bef313b94dd09d415ade8c2e3dddf2d921816eb014961a84c39c8307d795da5efed172dcbdf2e9a7bb8c745f10809730633d6bbf515538e28044b6ebe7ba39ce413016307bd3459e701b5e7aa606833044cedc7256fab4c85a8636e3e3af4d69bd958590a8e06969e16c8e630f6c2232299dae3d5aa86fae63efd700fbf7ee4fc2845ffe92c83589c7fab57f01109976e465504c8c771b63c7f51c7ff19a9d44fa3ec7759ce6fef1f63f551819012b5da71a209fe4c871c1e40c287cfca2a024cecb745ca0ab02f53e52d845d297f856dc2a33b2b0a6a3d7493c8bdc7c53c0de81dbfface5fe534b93225aec05eeaecbc69ebd3d04880c0ea24aac2c68629e7d07c0c443378db3fd0df8bb3c340c89c503a128125fc395118827e943b3a65e7bd5617b7a1c2322870d757d5062c3dc979053c1433332eab32964444092ea90a6741c542d033c02723353be65912015f47dfae423a94da1ea71fc1d082be4be62e7075f61ad6ed1d0cf06b2b41f73693d23d7edbfa29a110b343f136dd8946212a25c94052334de1fddebc61c23b304e9109d2e374485ceecc6e865357e4f3523c286d314e642d471fd6b3b0b8586bbd6009ac4df0e8f86e19d5c1bef97797bdb6e513ff7b0f915fe17abad3a54382badf956452e6a6f6c5319adb728b820313f7a109b34b21ce7e26ea36668e1e4d872a9ccdbc585846c5ad77facc858f638e20d7212f21550c96d4205c0f51de9c818ad4efa1bceccda32e41da6e875d75d1d7ae4fb6a8d2ffbaf9f8f72c3f923a1df0571043d57d02caad215ad04ebc90133be763e2cc2bb87af4f75f31e5321910512af5244017427d715e560b7c6d470c4e791b43204468efcc8fe1a5ad61ecdeff445b76407c7e3957d420e8a49e9d2581ea6b49bb28c41dc87a88e23ee6fc4d5500e0bf56a6c275e5484d7adc66d81562926ddaa0a9a144ef815531b3bf18f89f2aef92a1fab0b3ef8245f1eaac2f0696b862b6dcf77f9785e2bbf2b4bc9bb95690c8e8a9020a789edeebc99324277ee224954d7f6afe9244dcf1cb849419725a4ca6d27abcd80bfd78b2368037f39c2b1714268ac7476628a2c87b5d97453e00c3e1207ca8722ad797a72bda7be1e96e4219baac6c1c21885cc5389806e2e2947be97bc11310744ec2b5bff17ca0233baf52dea2bab1bbfdd3d01a2f39a84d7c26ba342a4deba39f9eb926b70e19ea8c5d6e299c1b57125cfd12194b4409974761fa413f5a9581724b231cdf1349a93416fcfd3872a4ee10aeaa2715e168162bbefe9e7dead4f6b30dbf9111e8f0638e1a42b1f317cde5ab212fa68ddec51ff510d5a86e7ac84863b152d7f0ffa6466814210a688e17bda45aad87e92040024414945de07d0732da7618987bfbddc5df20d11a1cf7e407575a40ad05c473b988b5080996db58ca00cb2f49b077e7569ac77df436a803f8e2b1286a8eebf453a6d764040f8336613bea60c1f3f555fc2313c25d2f0e0853a5916b4d6e5d35c07fd394ff60a2314dbb63ce51ba9b19d9849d2e349d9091365e842844dd3f03cabf086baa37e8805e33f79f56aa93c7c8259e56dc8a36e4bfc3fbae0b045490a4be7cff2a166abe8554376b9a76c015e0459617a3133e158f7a697763af1a303900445ad17a3b3d52106a7ff8e3a5f5a3fd8ea1cbca3664c8ee133ea4c32bf8418e843e82c935943f44022cab13d4ea14981053f5ecd76a95d844560039dcdda58bc48b6187e6c76e92c54352268646c2ecaf5e5085a49acfac6259567e774832c5c0df28c0de6cca50a4d51d13ddd9d54bf58fa8b33820484c56fce208c87087818a5a1eeee75bf37a27a21316bdf28a0c098e40fc8e1abb43f6dd", @typed={0x8, 0x31, @pid=r5}]}, @typed={0x8, 0x33, @ipv4=@rand_addr=0x26}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x800}, 0x180) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x8, @local, 0x8}, {0xa, 0x4e24, 0x1, @loopback, 0xfff}, 0x5, [0x6, 0x80000001, 0x5, 0x0, 0x9, 0x1, 0x3ff, 0x75]}, 0x5c) 08:30:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x84, 0x8, 0x80, 0x16, 0x401}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000300)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, &(0x7f00000001c0), 0x0}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$TCSBRK(r6, 0x5409, 0x8001) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000340)={0x1f, 0x8}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r12, @in6={{0xa, 0x4e22, 0x1000, @local, 0x101}}}, 0x84) r13 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r7) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r14, &(0x7f00000000c0)="1cc1db5492b599e2fadaf7b767e1dcd8e000c2cb24f16645f94bb441b251170baabaf777222b7fc3f3e310d7dbea", &(0x7f0000000100)=""/150, 0x4}, 0x20) 08:30:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x123002, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000001c0)=0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x7ffffffd, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r2, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) [ 410.772177][ T17] usb 6-1: Using ep0 maxpacket: 16 [ 410.892788][ T17] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 410.901144][ T17] usb 6-1: config 0 has no interface number 0 08:30:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:30:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 410.998608][ T17] usb 6-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 411.008281][ T17] usb 6-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 411.016487][ T17] usb 6-1: Product: syz 08:30:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000240)='\b\x00\x83(X \x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0x4, 0x100, 0xfffffffe}}, 0x20) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000500)={0xd42ce2914e73ea92, 0x0, {0x5, 0xfffffffc, 0x1014, 0x4, 0x7, 0x6, 0x2, 0x6}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000440)={0xf, 0x8, 0xfa00, {r7, 0x13}}, 0x10) fcntl$setsig(r0, 0xa, 0x41) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000280)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000340)="11dca54d5e01cfe47bf1709edc2a7262606714e01e4121db3e173e48e975ad7cbe3fbdf62242a404fb49f293f0d090b059dffbb6ea22e8e3dd600afea108df18ed4169f70ac205cf569a278ecc26afa9d230cbb62c9923dbc4505a12f58c0e228a361da5a6") getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @empty}, &(0x7f0000000180)=0xc) sendfile(r0, r1, 0x0, 0x102000002) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000480)={{0xa, 0x4e23, 0x10000, @empty, 0x7}, {0xa, 0x4e21, 0x192, @ipv4={[], [], @multicast2}, 0x9}, 0xffff, [0x9f9, 0xdf, 0x1000, 0x3, 0x2, 0x7, 0x1f, 0x9]}, 0x5c) [ 411.064386][ T17] usb 6-1: config 0 descriptor?? [ 411.104645][ T17] cp210x 6-1:0.111: cp210x converter detected 08:30:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) sendto$unix(r2, &(0x7f0000000140)="dd788d9c52d43cf8f780f2c7e76237cbd311f43a10d36a208462db212fbc1831e564d7ef344642179408786d1e6126585a551ddb2d0584e83e72c649eb20e39875f211c843e9cbcaff773b891a1dabb3122fa0d9dfeacd1cc90c9eda3ee44ac688d1c0c078a9e80c2165bccc63c3c490331ad71e382cc31f231aecfdf65e1a672ec8af7e7b257f38de2c618cdb71dc7e109987ee18eeac071aacb3ca", 0x9c, 0x0, &(0x7f0000000200)=@file={0x6e4161c174cdd0bc, './file0\x00'}, 0x6e) [ 411.782440][ T17] cp210x 6-1:0.111: failed to get vendor val 0x370c size 15: -71 [ 411.790414][ T17] cp210x 6-1:0.111: GPIO initialisation failed: -71 [ 411.812331][ T17] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 411.819458][ T17] cp210x: probe of ttyUSB0 failed with error -71 [ 411.828701][ T17] usb 6-1: USB disconnect, device number 9 [ 411.835747][ T17] cp210x 6-1:0.111: device disconnected 08:31:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r15, 0x40044590, &(0x7f0000000080)) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000640)=""/4096, &(0x7f0000000040)=0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x4, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x9, 0x5, 0xba, 0x7, 0xfffffffd}, 0x14) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$TIOCGRS485(r10, 0x542e, &(0x7f0000000240)) r11 = fcntl$dupfd(r7, 0x0, r5) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'bcsf0\x00', 0x1202}) open(&(0x7f0000000140)='./file0\x00', 0x4000, 0x80) r12 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r12, 0xc4c85513, &(0x7f0000001640)={{0x0, 0x7, 0x8, 0x1, 'syz1\x00', 0x2}, 0x1, [0x6, 0x1586, 0x100, 0x0, 0x89e, 0x3, 0x40, 0x5, 0x3, 0x1ff, 0x4, 0x2, 0x0, 0x100000000, 0x8, 0x7, 0x2, 0xc4, 0x1, 0x9, 0x8, 0x4c6e, 0x6, 0x101, 0x80000001, 0x6, 0x8001, 0x7fffffff, 0x1000, 0x8, 0x5, 0x2, 0x0, 0x1e, 0x6, 0x7, 0x8, 0xc7b, 0x10000, 0xfffffffffffffe00, 0x100000000, 0x40, 0x4, 0x3, 0x2, 0x9, 0x5, 0x8, 0x1, 0xfffffffffffffffb, 0x37, 0x7, 0x5, 0xffff, 0x4, 0x86a4, 0x57c, 0x1, 0x2, 0x4, 0x81, 0x5, 0x0, 0x800000000000, 0x9, 0xfffffffffffffffa, 0xf4, 0x7, 0x8, 0x0, 0x2, 0x3, 0xffff, 0x7, 0xfffffffffffffffa, 0x7, 0x7, 0x20, 0x7ff, 0x8001, 0x7, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x9, 0x4, 0x4, 0x8001, 0x2, 0x7, 0x253d, 0x9, 0x4, 0x696, 0x6, 0x8b5, 0x8000, 0xc04, 0x8, 0x1f, 0x1000, 0x7, 0x1ff, 0x3ff, 0x6, 0x1, 0x400, 0xfff, 0x20, 0x6623, 0x400, 0xcb, 0x3, 0x8, 0x4, 0x8, 0x1, 0xffff, 0x249, 0x8, 0x70ea9a20, 0x1f, 0x3f, 0x86, 0x8001, 0x4, 0x4, 0x100], {0x0, 0x1c9c380}}) r13 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r2) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r14, &(0x7f00000000c0)="cc720343a95208e35f1a830dfabff08d840571af33d2b3df9ed054f93b87c787eea70f4041801aaca04107e94fcce1328fa72a3ae975de3dda38c6df14d2490b6ae06d73ad962c36b3b48b75c9187d7e2d2bf13906e1109c18c735b2ec4336570d350c7b0319528cab1763831dd50cd85b9cba2ed6", 0x0, 0x8}, 0x136) 08:31:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x0, 0x4, 0x1}, 0x3c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x208240) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x28, 0x3, 0x0, {0x2, 0x7, 0x0, 'trusted'}}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100)="b4eac7b57faddedfb2762cecaacd3de3be47bace7e1428b22c223df11ae00b61176d72fe1490a4ec70c021fb0400000d6fcbdd0554ffc290ef7fb3a8855f6561e5c9c044b5d7ff20b420427fd3894fdf0d50428b29d278cdb66fc5721bf9", &(0x7f00000000c0)="378ec1e1cbf8da1a2349044dd8ca10c80fcfdcbf78e6430b5a8470824a986d5e170726983a41f7", 0x2}, 0xfffffffffffffd55) 08:31:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='ved\x9e+\x00\a\x00', 0x7, 0x60002) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x440741, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000140)=[0x10000, 0xafda]) 08:31:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x401, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000ef20ccbf0002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x889500c9}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4410}, 0x2090) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x400, 0x39c, 0x8202, 0x1ff, 0x5, 0xfffffffb, 0x0, 0x7, r5}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r9, 0x80, 0x3, [0xfff, 0x6, 0x80]}, &(0x7f0000000180)=0xe) r10 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x1, 0x4) 08:31:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000040)) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x9f7513bb27988e92}) [ 412.555519][T15876] IPVS: length: 4096 != 8 08:31:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) prctl$PR_MCE_KILL(0x21, 0x972c3a57a7bbf40b, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 08:31:00 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r1, r2, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/188) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc1, 0x4, 0x80, 0x1, 0x0, 0x2, 0x3e, 0x6, 0x85, 0x40, 0x2d0, 0xe56, 0x1, 0x38, 0x1, 0x8001, 0x2, 0x5}, [{0x1f7c133692e46cef, 0x577, 0xffffffffffffff96, 0x0, 0x9, 0x6, 0xff, 0x2}], "0cbb2b03bffce57c8743f5987651708c33f67543024c4ec7dcc289cd3e3a701c22c5231c177ab1b4242c90f9c05b95d13e1ea6a452a8c63f412c17627aabd8378be35a6e1096fd345feec5b2aab97e1e92e6df2f3a02bfb58e45b52d4b17efc4784b80c45c8cea35732125884d927774bcd46a5703fc9beef0eb50e528d40a1ed70a89631c2d4376d74b2372ed825d8c68e00cf76f8c61c55b317be6333887c0a78194e2e15ed34e64ec3534750a9790e30e9fcb9d469d2b9d47a7de127c2a9dc60869a5c1de938c920852e765c8b17ba4942e689968ccfbef12f4ac058d3d3a5f8bd5984ce42ab4"}, 0x160) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/187) 08:31:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0xfffffcd4) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:00 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c76cc210d779be7a2ce3c134108fe74950f9b93a5ea0cee7257225501bfbd9a2d7a0ec8c06b51e67f4fee76b1d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466eb935812a2d3e432b9ce916a7036c13c8b86314219123c233beca448dd9f82c124c794f7091e2b1023e629b02cda6d3ae0359817c5ad0ff74ed7d8973841c157945f7ea2aeba908227b92e995eceb6039d7a81bc3efc82e30d345cbc9a14e11dca36ea2ed921d3740210f66f32e73b897cca2b1550053d8a4cc76edbeb18e3e4fd678792d290e73cc1b159b8f5b611918c1f53a483c1cf0554189f553a670f26f34d544f1dea25724c7f895d2f1f1669c902e24d6169d941fbee0d1c74de251424cf0baac37166fc1ef3c64b249ddeff687f749fe2f9"], 0x3c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xc1002, 0x0) execveat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x400) 08:31:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080)="caaf2a5aad0f640c2ef8d7b1bd45b16f7267", &(0x7f0000000040)="e1"}, 0xffffffffffffff82) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000000c0)={0x9, 0x4, 'client0\x00', 0x0, "9d2b10391e32d1fb", "9ffabe4f89b371b748fda871c7ce30a248f4443192811ef66b4888f9d0627ecd", 0x5, 0x377}) [ 412.866199][T15876] IPVS: length: 4096 != 8 08:31:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r15, 0x40044590, &(0x7f0000000080)) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet6(0xa, 0x6, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="70051f6b027e86370ae83073035e352fc7aa0f6559033642af23ab301409ab65ebb47900"/50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000140)={0x9, 0x7f, 0x1f}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000320001050000000066f3069a08f9e3ab14000100100001000800010069666500000072ea1a85b29ca5b378d45cf005441114be2862a0744ae249b0c399be616464e258b48ea810c5819108cada028eb188aef4c9d526db1d9aaf75e66cf0b2d66f319360563d1491dd6747397209b998e6ba08bc867ad8c65cef3f724c1f79cc14f11a85d2caf585c89afb50cdb7428799097ad0fa0636b1bf56d7c0e5f82ed935e18b3c780f8b15fbb7344d41b16cba148b049b66c7b3072bf6b06ebbe050305a7519edb12a9999c4ce20912f80d08a972878fcac237bf58e052f3dc8e44016ea2232d025ecad8c5fd0a50a58c523f9f483f008b664f0ebaa5643dbf731b62bbd91276bdb6afdc4a5375ea5267eff9ca6586dd73a1fbfb80ebe69359b260d8100000000000000cb787d2572c1980b6e3baa7b8b6f4935697dd0c3db16eee39761915a2351174fe9673b420074e8d1ad3ef511241903000000000000003b00ab0b39b7123fef0039c92dbb4c07758567d7d92a8ffd3549b8469360674e9e1359b27ddeb3e6707e91feee3fe4af33d19d51182554d6e2bb857b9be18e4d620781323303acdf03fe6c306a5672e2b5c2bf403cdb552a649f0f12ddba61922889f8bbc44fd4e47884909cf8279c5f111cdbe2201a4f1062d6f4974ef38ee8f241d6e35434035812bf2bad0807e1902ec9a317f043b6cf52030f59d352137beafa007f080f9114dc433015b4183639e929490afa831cf889bf27560f79"], 0x28}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x22, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) ioperm(0x5, 0x10000, 0x0) 08:31:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xfffffffffffffff8, 0x840c0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x20400) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000080)={'irlan0\x00', @ifru_flags=0x308ac946ad3dc412}}) ioctl(r4, 0x81000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000040)=0x3de) r6 = dup2(r0, r3) dup3(r6, r1, 0x0) 08:31:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='rit0\x00\x00\x00\x00\x02\x00\x00\x00\xb7\x8b\xc6\xaa', 0x1f) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x400) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 413.286434][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.418570][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:31:01 executing program 5: r0 = syz_usb_connect(0x6, 0xfffffffffffffd9b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf1, 0x12, 0xcf, 0x8, 0x565, 0x3, 0xd29c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x1, 0xc8, 0x4c, 0x9d, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 08:31:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x4, "17c2a4e1a66073d0461c04cc88783546b61ffc94032790bc7d0ba9cc1cb5fa3a", 0x20, 0x4, 0xa28, 0x2, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={r3, 0x0, 0x7, 0x2}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f00000001c0), 0x0}, 0x20) 08:31:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x0) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fchmod(r1, 0x0) ftruncate(r0, 0x4) lseek(r1, 0x0, 0x4) 08:31:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r14, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000100)="6766c7442400090000006766c7442402000000006766c744240600000000670f011c2466b9800000c00f326635008000000f300f01c29a08002801b814000f00d0baf80c66b8b1e4998966efbafc0cb005ee36f6d60fc73a0f233eb8ba000f00d8", 0x61}], 0x1, 0x0, 0x0, 0x62) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x5, 0xff, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13]}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="0f017b06c4c13f5ef80f0966ba2100ed3e660fc771746576302e3e2e660f38820d8000c0fe66ba4200ec0f320f06", 0x2e}], 0x1, 0x29, &(0x7f0000000280), 0x0) 08:31:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x522, 0x440282) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 413.832518][ T12] usb 6-1: new high-speed USB device number 10 using dummy_hcd 08:31:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r1, r2, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000003c0)=""/4096) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60800, 0x0) r7 = syz_genetlink_get_family_id$ipvs(0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r10, 0x4040ae72, &(0x7f00000002c0)={0xf1a0, 0x401, 0x4, 0x4, 0x1}) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x32}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x40051) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000ed1e03dd48d0d94abc67a20eeed4ae00bae4b76c846ed7076cd6275ec2ac9f867699e28e85d58b641dd3f956e4f03b5f773d81f5fdc338e9ac3ea4f898b0fb0b8083b6ee3888fcdefd1eeecb8dec3b073d79a439ead2e8c1ef04d16f3b435e2686b2753bf13690498455883b6597a6c3255825230196b1236cc9cfc9db81b7d7e6d6a7e3f948dd36457d03bb9be7de6a80b01ca3873f0bae08de60901853d342abc617672ddfdda36232d108154f63a3c19e550c4d88589ff302d7f729689f2575fbc9654cdcc0fbd00f79b638342843282f1314006ca5c252eddc09ada4e0f16191d0", @ANYRES16=r7, @ANYBLOB="20002bbd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004807}, 0xfa964b1dfac5ba1a) sendfile(r0, r3, 0x0, 0x102000002) r11 = socket(0xa, 0x1, 0x8c) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) 08:31:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000440)={r6, 0x1c, "bc6d092400b1726657b59c55ad9f5264657f3066113a162f9a8de466"}, &(0x7f0000000480)=0x24) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000400)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getpeername$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @loopback, 0x0}, &(0x7f0000000200)=0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x108, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0xec, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) [ 414.086588][ T12] usb 6-1: Using ep0 maxpacket: 8 08:31:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r14, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x5}}, 0x18) [ 414.244273][ T12] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 414.252416][ T12] usb 6-1: can't read configurations, error -22 08:31:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r5, 0x5}, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000025000000e7ff0004000005000068591c913b60b16d000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000001c0)="100000400300000000", 0x9}]) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000000200)="64ba0557d46a1b87de1f04b4430273751885984753cde5cc0ab39d", 0x1b, 0x100, 0x0, 0x2, r4}, &(0x7f00000002c0)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x80000000, 0x400, 0x0, 0x8, 0x6, 0x8, 0x5}, 0x1c) ioctl$TCFLSH(r4, 0x540b, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in=@local}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0x198) [ 414.432853][ T12] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 414.692541][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 414.872351][ T12] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 414.880327][ T12] usb 6-1: can't read configurations, error -22 [ 414.887296][ T12] usb usb6-port1: attempt power cycle [ 415.602252][ T12] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 415.842173][ T12] usb 6-1: Using ep0 maxpacket: 8 [ 416.002496][ T12] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 416.010729][ T12] usb 6-1: can't read configurations, error -22 [ 416.162190][ T12] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 416.412332][ T12] usb 6-1: Using ep0 maxpacket: 8 08:31:04 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x73) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x10000, 0x1, 0x2, 0x0, 0x4, [{0x4, 0x400000000000, 0x40, 0x0, 0x0, 0x100}, {0xffffffffffff0000, 0x8000, 0x10001, 0x0, 0x0, 0x3099c01d9518043b}, {0x200, 0xfffffffffffffffb, 0x80000001, 0x0, 0x0, 0x400}, {0xba06, 0x0, 0x4, 0x0, 0x0, 0x1000}]}) sendmsg$inet6(r0, &(0x7f0000002500)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000293c00003600"/24], 0x18}, 0x0) 08:31:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000c3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f00000000c0)=0x3) ioctl(0xffffffffffffffff, 0x1, &(0x7f00000001c0)="0804a5f6360fd9a4d276159459fc0e7dde8f29d3908acb20aab5f2d75c743786a026ae160b10f949ee654d954a5f0fdcfbf2b2bc7a06c262945496b0cc75c2f637a1259420135dfb65dca45bb4ee184262dfef0e329c4877a447534a0f302651d0c806b298da017c9ec1ae417b2ba6e640bd2c3ab732a689b455c89ea6579d7bcfa5a2822530fd2615ebfe5e24199c45bc5fdb70c9cb7774733b3bb42c060e3d93c5c362d7176c21fb10850000000036376b1cb253ae064e00e8e4d0e3da4f628179167150279a3c5962405083ba0e287a1915510077724f8e3ba426") ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000002c0)=ANY=[@ANYBLOB="00005c00e0e244d306dab3f9fc4b0758638a83a94dfc8bbd29d3bf019580964b6fef943cf67c9060ff301b43134e83bb35ca6d2d120ea9e13918980a2b3716fff5f15b5fee95b1d035e11e156ecc6dcb0de24547aafcc2c1a772b09b05ad35e00fbb61b865d956fca702b6fe4142282a4a0069b5abd4bb0c6f8be382383bd51f5bf6911847110b957e6f13b501ad15be651bce27a3af408fcad26a31fc07436ecaa1575837f38da809d625ba048d6387b63fe2f09f12b2da1f4955c725d63ea84b376d5ca6b3b05ba55ace42e14af14a35fb79e8cbac5bc1298de9e28c42f9ddd4d510e597657d5fa96fbfe4d68a3f11deb52d747a90"]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0xfffffffffffffde0) 08:31:04 executing program 4: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) dup3(0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r1, r2, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/187) 08:31:04 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x200000000000006, 0x484102) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xffffffffffffff98) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r9 = dup(r8) utimensat(r9, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)={{r4, r5/1000+10000}, {r6, r7/1000+10000}}, 0x0) r10 = open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r11, r10, 0x0, 0x7ffff000) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x40, @rand_addr="3b374d2427693b4e5708749f9c6a08b8"}, 0x1c) sendto$inet6(r0, 0x0, 0xffffff91, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x6e) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r12 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x7fff) sendfile(r1, r12, &(0x7f0000d83ff8), 0x8000ffffbffe) 08:31:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r14, 0x40044590, &(0x7f0000000080)) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 416.572366][ T12] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 416.580459][ T12] usb 6-1: can't read configurations, error -22 [ 416.587376][ T12] usb usb6-port1: unable to enumerate USB device 08:31:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 416.717211][T16033] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:31:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xc0000100, 0x0, 0x1b], [0xc1]}) 08:31:05 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0xc00000c0045005, &(0x7f0000000180)=0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0xaaa18091a226276b, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$int_in(r4, 0x5421, &(0x7f0000000140)) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r6, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r8, 0x0, 0x0) setresgid(r3, r6, r8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$binfmt_aout(r11, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)) 08:31:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="cbab124540b025b52a0afe634b8a49b8ca3054ef3dd3b35e3e13d6b4b7fc6f06264bf17b98daef0c4c1e4c5489bf6b92b4241f6a7601d3b66186d51cfa4e243ac424bcf655db109914518e4591329760c64da3386c3ae1d7d419a42fcea48fced19013fc6c7bd169a3be1c15836f7fc50a62b030d1a9e26ba2eddaa21f75", &(0x7f0000000080)}, 0xb1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f0000000240)="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") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 08:31:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x109140) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x100, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x1}}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r5) sendfile(r0, r1, 0x0, 0x102000002) 08:31:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x400000000, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x800, 0x0) sendmsg$xdp(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x2c, 0x1, 0x0, 0x15}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="7a8bb1256919f67ce67a72b3a73669a9bc0df33b4b50bc60b81b4745d9aa2ebef83734bc121541fd48f7a6d8f42fdaf6c8e78621f80c7ed35d3b559bf5c6f33bb977548addf28d772c4927bc2323f44067c961802893a33dafdedc964b13b2e0835ff0a9c1293ec1986af8f92fa0ddefc86efc526b95a2ddfac47d6517599cd8f002b8db02c925110c1c9940768c1edbe1f4ae2546ebb8ee51044ea71d4f605b1e0f519832d5fc4b238d1d1133a89a9ded267a360239b4304623869dafed2c416d8885a56b00e086839dcb2fbf3f072d4c811a1657", 0xd5}, {&(0x7f00000002c0)="f831a119c0a180870ada4e17c2fc7ac324b4402c9904469d48ee5f655e0fbd81f6acdb921750ca49a03d850a0cd7158258ebb8fd1ce8fe0648cd0e9ba07d4e6e898c42395582c288d1b25a8f7cba742cbd2f3e320249ab758acd7530f3c6ea5baef3b5ee3d1ee4c3cac0727539f552c2a04a69e1323a1cac940bb41b", 0x7c}, {&(0x7f0000000340)="8ce73d6f3c1d41b9e139b7129d76d3835a71efbbdb26b1cdfd093569ccd6ad9e860b40dc39f87dd1cac1b19ea831690d66d5c98414921855eb1415dbcd20feceaaa536eff1f37ad3bb352ecf6113516bdcf92102e3a4307f18670250761aeb896439dc852fbc60cde82ac389e1483bf2a245f6d2ec378d5d94348488d3973317687b727b08256f832d4a57e2e46d064bdd2aeff9bb3681f049a7aa8e1c6c993c0b185bb1ef257828f01a4fbb34ff18824ddd9c6838fd8a33cc0c8b18ea60c4976f86f0ce5fbe8c9868cd251938ebb1ace896ad3e07d45947f423dc4c5dd7a6cf1d9fc6ce345e31da86682dd41acccce2cc3bdc827c46", 0xf6}, {&(0x7f0000000440)="453161ad2f181ed130c273ed43ea10973745311e357054dc0759f0167287eb76ef2df35eee33343c75b93495855470c6353df17be117abe77eb218d168d2739ab148d296b5af3c6ba12a657adb86540e6368a0b9bfad76fbf4cdf31315e7bb3a8597aef7f4b68f1bbad5b74ef75610027857ab129f58ac22cf31d6b4cf9a5096562715f577ea19ec67c35cea46d4664e96ed608a9dbd44238515b2f194444a6422f97d28cf26f49de27896170a96dd0f58f942c1f169e56099356de497bf1616169486bd6db448c970633918252acca1549230", 0xd3}, {&(0x7f0000000540)="4b1a0c51208d9ec6b9e5eae73c715e6b2da41938c6fea855e152cf72f30e5a526af3d1e0f26838a4cf2375c893322a894dd878166e99cc11c32111cb3b6d8445", 0x40}, {&(0x7f0000000580)="e8bf90d541f1586546e0d19b84dfdd69499346993510bc2849bc6f196360f16bb4eb37de31cafa93ab6ee541cb7359da33a156ef4d963e5a24bd0b8c0872ddb50a0c97b4f732e81a17841a92b6395d3963091154cec9f4f2983525cb7810000a76b0dd00c5541937e12382bf3edfb862ab6bce32a1651147f5d0475f8551eeb5ebd7ee039bc07a6372bb80896c68ea5a7506a56c67ff8092f15a91793a02eebee45c3a4789af4411a96f5cac7bce1e3c1e642a4565a841d9a076cef95f", 0xbd}, {&(0x7f0000000640)="425071a583be0125dd66c8b702a9c68c885945fd22f4043dcccba977aa49589313f3fc80999e88fc5e8e60a8975e824e82cf18e06094e97330fc934aadd62b74e14f6c2400ddcfac2ab59c321bb421678b477e1d6eaabe7d7e7ecb82476c768ba75168a0e12a339874a79415e880ffb839e84968b9b8332767c63ab22497ae355dafe8cf7121db70bbd1ed24aadaa29f28f84f81c48e6a2d4b35b98be79341b72a7a7c994044b822e5f62358ffb486ba3f0c3632708b8a57295c05996b255d6b", 0xc0}], 0x7}, 0xd857d919d660bce1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) 08:31:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:05 executing program 0: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = dup2(r1, 0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") prctl$PR_SET_UNALIGN(0x6, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) munlockall() 08:31:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:31:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x1c, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x20d, 0x2c, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x4}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x4c}}, 0x0) 08:31:05 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = accept(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000001c0)=0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000200)="427eed451053272e61be8ea9c45f4b8f", 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200000) write$P9_RLOPEN(r4, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x2, 0x4d5, 0x4}}}, 0x18) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 417.599503][T16089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 08:31:05 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = fcntl$dupfd(r1, 0x605, 0xffffffffffffffff) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000b80)={0x80, 0x0, &(0x7f0000000ac0)="899def9556e2103325d255cb0d2cd44f9ec6616b52ce21ad49d3fa12f5074cd52ef4cec1d12cf9b71f830869e3e484aa92bc0052491c5a83a073661975aa311488780e9a4e1f91df72671c3d63834566bc6775aef5483cd3c8d8de311ccc8db639d2d30566d988e2f8856e2674cdf1989c645a0ee5c17394e89aa3bd24143e2c90f4b706cba5fa5cf1b2639b2366994d914c104d", {0x0, 0x80000001, 0x36314d4e, 0x2, 0x0, 0x96, 0x0, 0xe117}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/audio\x00', 0x147c21, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x5}, 0x10) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/null\x00', 0x101000, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000d40)={r9, 0xb3}, 0x8) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000c00)={0x2, @pix={0x9, 0x186e, 0x30314742, 0xc, 0x2, 0x2, 0xb, 0xfffffff7, 0x1, 0x3, 0x1, 0x5}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r10 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x50, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x361, 0x1, 0x2, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x28b, 0x9, 0xfa}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x20, 0x6, 0x0, 0x40, 0x1}, 0x26, &(0x7f00000000c0)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x27, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "cde8069b2ac1fbc6d17fa71f74d3c200"}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x33}}, {0x8a, &(0x7f0000000140)=@string={0x8a, 0x3, "79e5f33ec2de72ead08e18382ea4c15a1342b78b13059740703f78131aacecb596ccc1236c29b77c802373884d0118af74fe6bd2f399b0af0a76f3dd5651e70b50c68f6bea95a004488e59b9a98d2d6e63ad143be9a81ed944f700b279378b3f78f68f464b0f35d5bdda647fad68c5e6462e177197c122b9d0710886a7554668b3bd30f24128ee0b"}}, {0xd3, &(0x7f0000000240)=@string={0xd3, 0x3, "c789608286275ac5c31d89698196a93e411b063b5ffda3e567e325406fe38a0dc4439349fcd16506c8185552d8ff0c58d0c6605ea53aada45cb00b290f6a99970db43731681816c6726f2994b3d400eeb6003937a36262803bc825453f93c1bfde940d659a143bd352085e67601f0d460e064cf85d06b79b9c2c6379551d48de972076992e7e186d25b0823ca120132fdddc435c6a4c822cfc7d84eacd504685000d266414e2278866052613426ffbd388a7e75f6bf3093b442afed0ecfa90b7487ea1290bc6016162e2d6a5cfc2e0349c"}}, {0x13, &(0x7f0000000340)=@string={0x13, 0x3, "857d6f1222941061aae5bcbaf245d03b8c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xc1, &(0x7f0000000400)=@string={0xc1, 0x3, "f9a3606477e8239b16e2768783b3bec5b2d74b0e61704945a7db5a7495c7e243e35c4e73be12c62f1dd21526d1fdae119a975e2893bfcad90c9f844b2a0b27f7d160a3dfe042dbb1003cef8d8ea6caa90c92d8e37611d754c55c94c4fa55cea1d17b82764b14c6ba463734c7cfdde215f605d725bfd1a00adcdcec13bb9d848f46028ff086a10069764006c65d221f43638a8db80c29f0e3e2f4f8f149fcb017f45fe2392764f81555ded3232cab2f1231447109584a2db1c8f165f164f34c"}}]}) syz_usb_control_io$printer(r10, &(0x7f0000000780)={0x14, &(0x7f0000000580)={0x40, 0xe, 0xc6, {0xc6, 0x13, "40d5cda733e8fb0fd85dd744a2c8109075a9630450dabeff68a7a8db9dfcb07d8ad8b6db031bee778b395369542791ed3c1113825f16796c335e92d47a4d309c6cec13a9ffa2fe516988e2f875f67ecd056d4d020ac7e29609a06649f33d58e5a693fe51992e59b9074a3170393f696822c698b0b4e438a79235f64163fa9c4ebac6ef421c83258de6f446817c296694990bdfccaa70f987533a032fda86fa5ee9fd652eb52a17a11f7f5cb86fe9960e1ae5435fa00cc146076724025ccce7bf3b99e21c"}}, &(0x7f0000000680)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "a82f22b214c7de67cf0bceda39f8030bde0c5bd00d91926c0d974f98ddef70a7867257fe0887eed05aa7ca2d17a0309c76f3430561195572f9150b5783e7f977f6a18b3599276b2a74c2116ec84718d8eb1cb9419125f40d0df9943055965fbe0d8e0bbcbec5851782b1ebf84bfeef761f7399bf5c5d62d5173ae1ff7cf0cec1ebd4879e9a7baf937f4391e26ce0d69ace9ae8f47df26691ef997dafadef839c884f71a2d6039e791e0172a6b7c4b97a5dfd9fed2f33e2cacc9aafbc4ccac7ae2e15e9b40616d1e85c1b373887c35f80027bbc29c45f86b508571ea6fcc8430eae2437b140751d59877cbc2f07c1ca"}}}, &(0x7f0000000a80)={0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="600cc0000000a3b2aab97059e60eb3a384f153e64360dd1b2095947f3037d3aee93de604976a91cc68f0a2bacb5cba4210dc8e4e8a7dc1e048ca968ee03662d3166248c4a4e22b053efb3a66dcf169409d3c4d8d874d449b260a841e25ebfc18c7e954c26966176643c2e21d88c4b0718258d73d16ce794fa97ee3da6e96c1c7cefb78322a156719a1801b5dc6f8b3f2ef959c9f3fef684cebc5ca67efaff8a5df8bbc8e83db3b529ecd896cefec44302b0e9f87812851d4dc76c2a63c45b3b166f315c0211f"], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x0, 0xb5, {0xb3, "3ed470c536da8515c809e474311f432d8b23555a286dde5e4daf146d2aef995ac4ec86cd565e607bd1e61dbac4c219a96d0087abdb024948dbe7cbd671e948b7198692f4c73d96e7cc03fa24001bba7adc6cbde7cb068e068371d7ddc4c3e1628068f7fa1d1aba5bebdb16fb7fc6255da563043fe9d758d5e79d87d5722e3084e07c0d21d285b55584218cf2b2042bf5575933766002872904f758e9d47be72f76fe67fe21b152c50f3707708ae0c60d717643"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x1a}}) 08:31:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000000c0)={{0x8, 0x1f}, {0x7f, 0x60}, 0x9, 0x7, 0x7}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat(r8, &(0x7f0000000380)='./file0\x00', 0x0, 0x102) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xc, 0x4ce1, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8, [], r12, r15, 0x0, 0x4}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r16, &(0x7f0000000240)="e160ff169db209f79b00a776fc1a9152791b4942152201aaaf0e45e679d2a3aa664de55317514820d1b775034b5dcf949efe965a53c91b6788bcc79fbf7cb9a5b52fcf56ab7e92ad42d5e579e33701daf0efbf0bee7bf7f90000007fffe80000db3d1ecf3ab05e678ceedcd3bdd32a056b84cf75889228fc00fbce9ab5f06822da3933a80000245c9725a20fe74e217d227d0fcedf00ca00"/166, 0x0, 0x8}, 0xbb4b032f7bd3e44e) 08:31:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) [ 417.847569][T16102] Unknown ioctl -1068477616 08:31:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmmsg$alg(r3, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="4fc7dca5aa79d59ca00bc98e7cc47ed84c61b59d5465db03f1c704335387cc0ae800863d1235b8d9249926e408ac17af1041b799d2530fc436c82d49f9556af22ac34843a7b5579c24fc72dc42d349f9", 0x50}, {&(0x7f00000000c0)="e87c94c955a376be0b34b5fc521d8d3e2d05a0b11efc9dc99f81d8961ece50cbc6f85c8b", 0x24}, {&(0x7f0000000240)="8d294f8189cc762b99d77c94f7640b6bb4314a260a520ec88ac40cbe803c6d94be02d8f427960478302f34fe048f422135c7f7bf4251917b136980df02562f3d2a684246b84a5f0455974942647aa156e2dd4bf1577af3dd1a911ef2e9bb5a099fb138f16097064e580e69d9bd07cf55d36324ce82a4608be2a7fe391dc6b0258989f72a08990ffc3f877d292a6bdb", 0x8f}, {&(0x7f0000000180)="3e7454e842ef1d7fc7b8e201eac5d5366cb00e6b584e76a081dd2ff90fa6770ed0b5b4605837ead4239377c2ac56c4fc9ad4e56d4d0075de544dfb931f9059", 0x3f}, {&(0x7f00000003c0)="7eb4fb15e5c608cdea1f44cd0fd1ba9e9506ddcd8d03a7f45b7fb95dc809cfc2826bbe192902a956e145c36647435abde58c1d84fdc84ba1ab7de66774bc4ef380b5ee63bda08b5c10735e77c49c46c6626566c16c8fcd53695247b0d4e1a7f7a53e4c7a43dd9f457da23a4754203cd2d503a380996f6e06b58bf030dbe78a088d5551f077d7aef82d29c1ae52e879e2073d06b1a61ad4737ca113263ac481dca0c5c3022d18c29ff78e237e4222b7429378", 0xb2}, {&(0x7f0000000300)="1f927e156857926eb6f7b41bdd65d368a95da045c052a5", 0x17}], 0x6, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="9da88399780225afa79730b3e40dccbfec478fdbe0d30e3d83544019d6289736d94cf88426a8842dbc53fe27b3f3b06115e7262f32b9deb63502cd7cd8bb9040dd698b2a0d5c8b963876e267936be26882f84d46bd901c919ccd6b6b45563b38612f05dee94a50f0726df6cdd41dd01b5a65e24614b06e12b9e5aa7936a66455e3f93570d154066f8fc0818e8aaae82397a80dc905bc0997a449c3cb8aa7497e5163793f04e7d5f9d2f0a4536e4691cbfab6031b7d592b69", 0xb8}], 0x1, &(0x7f00000005c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4040080}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="a53df3326216c62e3ab0584639e1fa9325f466e697fe95d544a581fab0fdb0ff7ae2bb6ab1ebc21be61634832bd6d095f84f5277b692a258038c39293a17103e9d7e0cf376a57cf416e5af43f8dcbf28b5ccfb7e27d0539ffc1d0eafa0ae355662fa673b71d98c81c38e8d72f7520a1d45bd99", 0x73}, {&(0x7f0000000680)="23df5450ff44c93ba4a4cf31de33ecc0987c07f4bdcc60d146fc26a2561a79ceb023db5ca2e6e424d5dfbaf743b3721d17ee85729f319220906ee1c05efdae3240023d037fa30ea4", 0x48}, {&(0x7f0000000700)="4f1b8e51dd7f16616a910f8ccc1a0f07dcf48d519f5f9627df87474193de5f0e285037923276789d6a903aa71eeac8c3683d8a53507d1abbb05811266371e99bd87221430542a7f79a0bb3d10a5ee6bf1f81d1d2a7936869820479820bb7fd37a58dd5549db421c574806984b88b06506b599319a918ebdc95681cfc0ede0e9caaf56c4c290e446c2ac7feab17b7d502a0ac25b5159d0b179527d1fb3a", 0x9d}], 0x3, &(0x7f0000000800)=[@iv={0x30, 0x117, 0x2, 0x1b, "11a5e5bbf68e8bc5a754ca13bb36631099121e4cd3696e73eb1257"}, @iv={0x40, 0x117, 0x2, 0x2b, "54391020f0a679cc5325f370d3d558b43eaaf3d9072758e7c7cb0ae4268716fccbed50531aa8a802042614"}], 0x70, 0x4000000}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="3d1eb72b7e", 0x5}], 0x1, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0xde1934c591ec57e8}, @iv={0x90, 0x117, 0x2, 0x75, "112ad737b300d52ce2462053ec9858beb11bfe4d61039542fa0ea2e03749b28a8c045f81b523f27726825b45dbae4f71fd57144b755422b149c7cb4f230b0da86d69d97255fc5b50a5ec1fa14f53b73c43cdabd3988d8f863a334d00bf0651805274052a7f43f5152e20a845a2d9f87b3e54dab753"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xf0, 0x20004004}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="7a1aa67b2a6078893cc2585344f577a014fc5b2d056308ec", 0x18}, {&(0x7f0000000a40)="a750cba8a30acbb379f433b2f68e3d03af705465a7b54f70cd1e0c072bc0a8c90cdb53127af2bda3f217c6b7b1a4d549f7dacd6ea95ccda009c8ccac2923d0f1e5681a8311fe37616bf01c2d8f2946deebea19db64a6be8f51dcc11aec5b7fe725bf28d167acfe75d6aac218f70efc0d93bacc7095b93e6adb1dcb5ee2ad1fdecfe555a0f8bdd4213a87b60a2f1304874bc14193b4d438c5f110ba030ce3e065845bfea6d7186aafba32ec30b5ab6d51b40a84a1dd7e5217c7f022cc", 0xbc}, {&(0x7f0000000b00)="bd6151f7c4c5879d7ddac101d9639b699c69dece874f64ae884ad09386f225e5163a4a7c95c7a5b5cfe4ad5ac0e95f6c69f3053cbbb66d18cec7409fe1e20ef54e5ea4b04f0ababe15470a9bcc24e8a728ca44fbc115f034daf7e51efab1a2a5f5d9b111008a5dcaec7be5b434d927fa1902870d362d8b98a35fe9a5517d59f99f5db311307f426eeceddd313a1f1435286d3b946fbd221f2808e4bd6f52839a1ab3439f57865880c5b6a9c489e6f63fa56e3bbcf3beb8ff181e7facc73f0cb074e09a29b764aa4143a8", 0xca}], 0x3, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x9835}, @iv={0x88, 0x117, 0x2, 0x70, "ed67d21615695a1f6f49f2fc91aba90e924e30b5b1ad0b7aebffa931d69cca39152f441607ed5f6d26e1edcbc2306bea7086a23dcbcbd7ce52a34b0667a6bfe730654e0539e4518d8ee10451e2943f5cd7bbceea9a3d9a3939ec94436017c8c1dc8d1bc4995bb469c544ab28da57bc6b"}, @iv={0x98, 0x117, 0x2, 0x84, "6d8db5a683dde4dee39c0a7ac566c85c10d24f68ea1edf721b695a920ed3732373d468f53052eda7e40ec5d90fc4375590958b1cc8af306725b1483213cec0612e8e40b14de4532ab1457b9e9cf250e51dd369d0dd7839e4387a89d6981c3b97b4fd8f87498b07a8460cd5c84de4c3b1f0498ec04c80c14e36e67c5cf230e4375e6b1456"}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1168, 0x40000}, {0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001dc0)="172ff42ae879b7e1a42bfd8ac21a3691900c8a79c83380b1cd5f2c4214ebdf9bec199c48f43118b95e6daef177aa69123bd407c4d68de9bb2ccfdafe6c6854d0b71e858f7c58405517600d50b0b4848d81fee7c606f04ec593bee37f5f34f822d5bdac87da1024613c85cfa219a977892878193402550ad0afe182c767a3a10baabe8dbc83d8ff0333bd6b55bcd78ab640b0e4df2f041d1c5e0d76480e0b54828b9c4117d6302fb8e9841a769ae729938e2fc77dd923e9d9323e00c10880feb91356f5b8e05b6cf9ee3d0d37233497ab5e95ea93bf8847b5f694a1f30f995a446c5855bcdc4eaf0014f2a1d7e3d7764104704af1fba09c3d5b72eef39b65d96cc787c88df99c5fe33caf25eda6d2ba6821f43636c11534bd7b3cfdf23fedf63b7f024b5e5ed063c5daa3a6e349b79bb8281fac796b435922c41fcd706c5d215e4c076f2b0e8f1fc0bb0840360a497432abac9634537b87a195fe065941dfd225ec612d19f89041b82f9315010b9d2557955fd02fa78ee6ebcf89718dd98dd99155e1b5a37e43bd8c8120bef569afe240413a1829d8602dd3e87613d8597775b4dd1fbae66bb895d2f74244ce036ef212cb952351f839942185b5ae48303424141b3ab2c10bc52b482313963bfb83c40401f9b5db0b3bae561ee054a343ca6d072b267d3f2daad0360a08389b45272774ba2fd53635e17f686a8ddc40e78599fa2305ec8cbfce229c4a20ef1fd2141a0a5786fdacff50145aa42f86d851f05ade7131118b244b575fa846ec32a3af849848234c2ece3c98be0da2297e1a94591ecb38191f780dbd72c7a30043176f9b39b0b61c878bf89fe13d44975a05d7428c62a0d77ead0a5c2ccd9288c9737770623277dbf54d79420e175bd529edeb38117032a8c560bf4745587e7ae937429f14655ca58b3067feea5c5c1e2b5ebe7f9a5fc6ca958119b54433f5c7c48ddd04f7b2c5e5c1d7b97e2990dac1a402fb91c7cf781dfd621d9bd1a65558c7f2a8bd4d8d346eb4161696db29a5dafdde9d8f6ec28fb539b40a3ee1138a35107acd80adb81006ac444bc62f43805047a699aab211fb46ac66649969ec840476281119282aeb82c6b0a8a855db4be2f79fd1cd2d604d3ede086b490297b166aa0de89bb8745cc4d0136b014ef3493afcccfdf4f0f19ee0297d7e3cadb1af790c5591d65e8e152a14c0144b19e4b5979ba9f0dc62c179431523eadcdc9062323e2cbf3f648199d79994e2c7d869cb84c8b66ab3ef657ed539c6b03f1cb2be3e1fe088a361301dac1308bae20c6525eee64759a1ec1cd588b31b5028baf39c922974d2f12b46f5fb1e1009bb4b42394e08a35f03f159e0dfde511971adbca6dccd4127532726a0a7c48b49096a5a18e23155cc3a132e42d8ecf7d4a318fbe79b43acc1ddd0a9dbb88e99e1dd265827638f87f0825ecd73f67164da1dbe71884e54b598ab7548344d3fe5fa851f1f9bcd34ab4d253462dcac8e8bdcf1cb687287dd7b64d6ce2715284919b6c268e3eb54aa747af0c7dff29cf27ae4a10b572ce47f23f472af1fc6d4150afde6a63b8df06092ef8cfa637ba2eae3e3b1963ad3d469afc3fa33e8be2542663845800b173b842f869eb1959224fbe4ec41701f56fe28773a02fc13b2ada4755e6f4cbfdc3c59b43aa66f9a4a3d2421c62ca9b065690656e29251a3385c14acbb3165fe8bf69800b75e53cb1e73a9286d3588ddca03c28014c2366835d52c589427890992cfcab87a39c359ce650884d38e61e8d5011a73f5e1a06fd3ce0853f6bfff741a13f9022c5c3c9774713aa84e25111c1fecf06d8ce83523b234ce2ae303ae99322c515046607bed6531b05d80cc2c757763c0dd689ab369d091c3a522b71a714370667a0ad3995edd4edc545798d5f219fccf78f528a8d7e59ee13d4113e58ba8738b19cda783ab66733b7aa467d32b3f041871ab18b7e6e64153938b388de11ccb743b7df15b80279c2eaeb03bdc3272c2486dcb3f130d59623866e63a35ba5952ca266c2bf39af3db2b23b20c20fc38e992eb8b993584c45ffd396cdf115f470013f6324454cbe74e80ff8897c2c831c92358401bdfeda2b7088cf0459f536292b92c330427b53d6e9bdd97b1da4847b1b0525cdb69e105e26ec266dff387d7bc487415e2fe76f887ea587cb1b29b074387ccf357a33193928243639a684b6b28904f707d4115029186e79c90c05476ff6e79a36d871c952abdf966eb274458a8b88d177cc8f541bd8898483ab3020c871c2858db7c74166be7bd327ef0fd55a883bffa53f51ccd5603bb5b00846edafc2824c543efb8f8a55836ffc4866ef974af6597e07a939375cd2f8457a1ff69f946d9114c1970a970b6e470181ec8861c36c35d921e05aa4cdd1c08f192619fd976bf991b4bba6f09e6280a5847aeec997b827885fcb027ae42e0eb0219e434b1afd7f1662d12f02ab5b84409a3d904b5f9aaf7f1b072119e9cf5cd6165f5518a0af42f2f17da62e2e4fa4de370b684a166ebf9cb75b41f2a0434ef0f8f58f1de132a07678537d30c33a58ae1af3d929f443e2a4723c1a53dbbef79ec77334e2da8a412a7e576ea2fe91a0f2699522440b7e8b267c756829dae9188c8d4fc45731cad6eb8ec9cc44a117f5747afcd15068949849573f1e6501436e3439a0fea461510a82f77a8509c81e6be0999b69b2c4c6f84413155e9a903d9022c39fdd1b95118004b494b24561aefe79ec9e46fcf7450acaaaaf6bf85c50d7d460b37c456942cec066903a48b891f2fee7d3ad42af344661dc6b12dab838b90dd8386b2040b279a2f6ce3f27a41ce1978e435b0a9ec2cc94ce754af1fd965f4213b159b4c22c4e90bff0ad449058230031cbf481cb1771f22ca0bb58d0697066ee0a99f178cf1842e5039131c637113006ed75805d4456f5b326d85530bbb3d4caae007b6f785590a34c679aec9ac35183fd9c6085adca83a5c23e5860d80cbe96ee104d59214c41c48cd39f06014707b50acb98ee7318f6c2ee423aea38d3009e3b6119dd27da027c70783689477d04c8f06377a95868de9457a3ad6831d767e5e10b609a5efdd0b5dc77fa7a269c5297092a68a476994c9408a09adef62299ba1d66b8cf7cd2c291fc062a643f78c6d4461df48168f80e222375aa746e520b45c5836fd4fb88756d5bf5786e1834f164c7dfb616aa30715c3ff58bfaac526bb774d2ff682fd79e2bc90c56503497d12e9c232d2107f560810a956b2650d73c264bb98bedb4a926bdd3a159cb610ef4e1ccc431b9a047781df77e856fd4e742de5a28808dcc6ac9c6e23973a0c4fc4e026ae960060ef77097c466415a3970d9a0e9164d1fc890cc014bf06ca815a643ca0f3836ac08bdf39d067f73d254f2300d4418accb8ee9815a301f057532d6fe047755556dbfcc5c3e96d443e570d63487fde34e01ea82e73602fa923f1924410d182506ef25856a462df642d382a329925b505c337b521806504d41a2c46a9d868b7dcf5d57b629f1a051176dd273b277c2ea7f558bebff78b73d3db8d05eeb96bf784836dd3fab9abbe685a60e3af88141d374c7a6aee5160e75673ae9264ef9fe61da3472fa823d87c168a738090894aae18c7fffd86c00cb535e0d295fbf1fc39e68c024267591d0ae5982746ee73d5ced14e433534e465d2f2292517c75962954b7535a61293f01d4270a0007000f6c2fbb8c44afa7614518f6997d39a295956ad16481bacd6cbca4d0c6187c944e5400a0f5c45ba2f73e4845baf394f92d72d475f12284acb832955fb13907a19c14e2b4ddb3507fa89621b0eea8d26a32246e68ebcc6e28a9646b6b7a4bd7cb2f2d558e282b6759f719bcfc441a9a68246de44ecf4c722506489b377a85d508c8e7954ae7275a329a69e6da5eeae74cb2db4a83d7be6a80471c54a56f904844dca21012a734bdf57802b650bc4250c1f1abba77eb60e342fdb699545d5d82d05c50b7314717358c7e33b225a8200eed4ea2af72e567fe0a8f7665c7bc5f2495749333735458a983c187591c71b765d3af0d0303bf24b4af7e3be919dee4bd23ea6928bce73ae88cf24b58346ba1e135ac228950b371b520b206a04f5760b95ffe5f2158961db878911e066031d51d6e511285ca514d4c69aa75b3a82a92366343560352325bec4b8ee1b64614bd871a1c8574e8c3c523f8440ee77bfa6f82735348717e218c886f74a9d11371208f91ca57540186e62f0460769d9f51465a97ac4d0abfcdb8dddc55255e106a5183d9702e4cf2fab38398c97ebddc5b352f6f4a96195c6e5a95909341be93be93d1455d01a8ff383caef4136e5589e35f6bf32d5207edf33d88f9934b084c28b7fb196bca2004890d31273ccf5b10081bd276b02911f50ec15766b1bca41e980b4acb54fceb6a5093f4444fb81d0f1aacbff7158271daaa6e09cabdf3931402f533b7225c435d2fd1bd1614b3a40f7c64aa75d09daef9409bddb5ec0554bd68b72fc9239cb7f18ccc934a494f7798e4a0bc5abb3e2779fda49b82b6c9a855f99707cc9ca81d56bca3751b5d6308c0462bcd86763c30f13d637c953d6d0570f934122818ce29d5ffec59f52c197a973bfdb4dde5db0859c5d2991632a8cc4892e63f881a70b2fbd25255960efa751f4971f32fee52e32ab65b332c3efb2f9c753daf5193a8ff0518dc834f04fead28df965ef072a28fd12a9f86a61dd06a99a47dc780611190d73a75528f323e7282d1fdc0b3f0f105073be34fdb9113a9a9faef588541fabcf9b36951ae83065213bed040176d650f929f0e896c46f618c9417b7eb1a2c00a6d3b9da107815747f06185d58017d98d8a74556e2b59c6e94c2f8b51f918800094613e966d2c41cd111c8d5ca46c57001c4a264054d1925be9504a745b67be41e69ea24409be9fe3774aa6baf235b554f481a5206766a5976462276179a8ff8cf472e2942e9bedac6ce1a29400774a16cfe3b854fb133279bc6c595c05e07b9559a7024c339bf640e6ead94982de2dd2f557be9dd477b54099ccc08c0fa5534ba6ffda43772b16772a0c07a0f2aa05172081a14bf7f8e6122e495f282957c6a406b749a3e71cbb7fcbd00f1563dd6bc16e800851b7a4904eecd455c730e24df40fbabf8c194a5ee004ef1a5e932b6b572b445909e4e0319a10a78025ad19066447cf3df2acda9c7ffc28bd7eac13aaae0d9ab487444289a360b86c9f315a37ee0697a58c9afab4e6e16801f202123a751f65c8a54829d060552c5748a19147c150a03e7a901cee917696004199edd988ec54a87d01fd51b3e66c7e6ded4e791284c64ecb451b0aa513d91cad420757f8cd8050a87023f09b1514017bb79d3f3b938c86f2ae3a8acb6e6d28a4074417e582fe3294f30d344c4a7de295e62aeb849f98ccd9eb37707586b59a47024bd654791a6c6f70e43097605e1e2fc9b0d3eb171ceb967801737d5e2c0e3d1df4501079d9506fd68fe8f402a21f873fe48067a3b0e59e60b219af985ed775b593c578ba6aeddbbb0479fb65328e7bf24c2a606ff7d7a81ee39d5a79a70680984f98d79ee745d4108d45362479e04ddfcdb481d872fd43c982c51c756e791090226f3f29f9e7812dbe946ee1d0c087440cdf342878b767285e8bf42f357c7eb616a0da606f39aab18635b7e2f214c1f459e846b47a05affe594552157c320e75c6cc0386ea246a251bf456c49f2b05c5c217ec6a0c16bdd4c1e111a79260b5e81ead4b75c9dcdbc43096741bb8d1840bc595fe7435423c5392e", 0x1000}], 0x1, &(0x7f0000002e00)=[@op={0x18}, @iv={0x78, 0x117, 0x2, 0x63, "4c9343090ded4e7be2703f001c8cac76bae8b0b5e909d8912e21e9703d793decf61d6a9aa8b3fe9a778042d8989b9c78c15940bdcd0cfdedbfba2655dc785bf525eca1615f2b37c58eae71b18ef7c6884ae6506d17b93f76ce38125f7534af21143cf9"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}], 0xc0, 0x4008010}, {0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)}, {&(0x7f0000002f00)="9d1a1f0cb35ba02ee267ee9d975f0db7cae994e0c2f53b2af53fa7881829c4759f89cabaf5b1997bc7ae8a99e61e6855e0631d09060b0d5af07e5d1790149f277fcb60a720b6358ada4d2ab3c76cf54d9f2e5bec6912d280047275222a16ed7a532463e0eeb12473fd00dfbb4346cf8b2d21d0a2bfa6b61e54e72532ca25439b546d718055", 0x85}], 0x2, &(0x7f0000003000)=[@assoc={0x18, 0x117, 0x4, 0xcc}, @iv={0x78, 0x117, 0x2, 0x5f, "2bdf45b690b47fa965b28041ebefbf9a5a19a9ea9bbc64f7b2055c210013475e99d024b8f58356f1cb7fa11189130191b4dc171d1dd50d2571e8c3c4a01869b8969069fed32f17d6886d4f42f493768dbf2059cad41f9e27a57ddb7bbd1147"}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x9c, "fffa335bacf38aba332d3f78f357702096a00c830fb5dc856d0d9d7b520f5557803cbdc7811afdd1fc3f25029a17fe4b46243b23ff369209409cfff727263ca842aabc0de407e8a20e068debccadcb78462148392ab95c7dccecc82cda47df938e4b67f5dd539f7347f900989c9bd63a9518bba7d9128e81a306d255ef5f32e6ab50f1eedeec54a2c02fc58cc90ad7f076c435a03c4ecff6834feeab"}], 0x158, 0x20008004}], 0x7, 0x4840) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000002ec0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) 08:31:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYPTR64, @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES64=r4, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR]], @ANYRES16], 0x3}}, 0x0) [ 418.082298][ T3353] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 418.096823][T16102] Unknown ioctl -1068477616 08:31:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$hiddev(&(0x7f0000000480)='/dev/usb/hiddev#\x00', 0x2, 0xb757034de9af684b) r2 = socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_ifreq(r2, 0x8992, &(0x7f0000000140)={'gre0\x00', @ifru_addrs=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x200100}}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f00000000c0)={0x52d, 0x7, 0x1}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff00aa650000000000006662002c000200000000dbc63e00000000000000000000000000000000000000000000000000000000000000000db3eaf5c3c9d766"], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettclass={0x24, 0x25, 0x52d, 0x0, 0x0, {0x0, r6, {}, {0x0, 0xf0ffff}}}, 0x24}}, 0x0) 08:31:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x80400) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) dup3(r2, r3, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x1f) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 418.322231][ T3353] usb 4-1: Using ep0 maxpacket: 32 08:31:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) [ 418.377010][T16123] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. 08:31:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={0x0, r6, 0x16}, 0x10) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000002c0)) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/205, 0xcd) r8 = fcntl$dupfd(r7, 0x0, r2) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3fffffffe) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x4}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r12) r15 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$invalidate(0x15, r15) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r14, &(0x7f0000000040)="7e5e133e57819a", 0x0}, 0x20) 08:31:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000240)) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x65}, 0x1) r6 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x1, @dev={[], 0x1e}, 'gretap0\x00'}}, 0x1e) unlinkat(r6, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r0, r1, 0x0, 0x102000002) [ 418.442695][ T3353] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 418.451645][ T3353] usb 4-1: config 0 has no interface number 0 [ 418.459749][ T3353] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 418.468966][ T3353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.548655][T16132] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 418.633002][ T3353] usb 4-1: config 0 descriptor?? 08:31:06 executing program 5: write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000100), 0xe8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x7, @raw_data="4e5ac1a087b395eca61a3658c145ae9bd82145b49b80ca3e2960f64e1ed20749f2fb5f80def7ab2f758221e41ea5b9b6d82cbeada90a45ef8cac867d15f79badcfa078541a1fd19d7654b5e7c3e530e57f8e6ba81788e93df7a32c75de99be4879c8fd70c4f9e1703d464c3eac9e9aa6f69dd0a4e0aa5e8deee29c8c743a5d697bdf4b626d383a29cc4c6f2ea6688f2d56bf073d0a2e3363efa4746ba071ea6b605da9bd887a92ad4a669be8d0ad343bbd782988b0698c8e44c3f753ae81d185dc43879a86eb0275"}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2ac202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0xed, 0x12) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) 08:31:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='\t\x00\x00\x00/loop\x00', 0x0, 0x4000a0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 419.353550][ T3353] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 419.382563][ T3353] CoreChips: probe of 4-1:0.159 failed with error -71 [ 419.409781][ T3353] usb 4-1: USB disconnect, device number 9 [ 420.122197][ T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 420.362182][ T17] usb 4-1: Using ep0 maxpacket: 32 [ 420.482300][ T17] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 420.490749][ T17] usb 4-1: config 0 has no interface number 0 [ 420.497053][ T17] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 420.506204][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.515925][ T17] usb 4-1: config 0 descriptor?? 08:31:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x7) 08:31:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r2, r3, 0x40000) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffffffffff94) sendto$inet(r0, 0x0, 0xfffffea2, 0x800, &(0x7f0000000280)={0x2, 0x4627, @rand_addr=0x7}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, '\x00', 0x8}) sendfile(r0, r1, 0x0, 0x102000002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f00000002c0)) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r6) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) write$FUSE_IOCTL(r11, &(0x7f0000000240)={0x20, 0xffffffffffffffda, 0x8, {0x6, 0x4, 0x81, 0x400}}, 0x20) r12 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$KDGKBMETA(r12, 0x4b62, &(0x7f0000000000)) 08:31:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\t\xac\x0f\x00'}]}, 0x269}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008911, &(0x7f00000003c0)="bbc6522d57fa08137e0f6c978375a2a3f4e1984250be02f07687b496a8a1227e841712e8e7d5bfa53110c735d720000000a1fb8ed0cdec6cd98d302779773d462222e0913a1d07102a8e8539e9ecabeed1167895490c364bce1a637a8ff5d076c566c1940986c088a9661ce6e002000000000000008c7b7ffcb45254b7437a208c6b0772523ae4ce6cd0837a8d89cc82781c04a1b0705c06b5e054da1c5f") preadv(r3, &(0x7f0000000080)=[{}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/245, 0xf5}], 0x3, 0x0) 08:31:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x36a44d91) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001280)=[{0x0, 0xfffffffffffffc28}, {&(0x7f0000001100)="98", 0x1}], 0x2}, 0xd5a80a47e86ae0bb) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) connect(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x2, 0x1, 0x4, {0xa, 0x4e21, 0x2, @remote, 0x20}}}, 0x80) [ 420.879724][ T17] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 420.937718][ T17] CoreChips: probe of 4-1:0.159 failed with error -71 08:31:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 420.979257][ T17] usb 4-1: USB disconnect, device number 10 08:31:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000140)={0x100, {{0xa, 0x4e24, 0x3, @remote, 0x4}}, 0x2, 0x1, [{{0xa, 0x4e21, 0x7f, @empty}}]}, 0x110) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f00000000c0)="c15232751f83392445f23aa2ed1a5b5ada45f60a563d823da77a4813ee415a7201a996a610d532d93bf5a76e47996c2328c25c27f9e448225aa5f8657cbed3d882ea5f8aa422e4ed7bdd92"}, 0x20) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)=0x896f, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r3, &(0x7f0000000140)="3b3b87b9e8c34bc6c40250c1ce9d5ab1a84093eb5cce94220e0a61dd7f84fe502f47cf32a7726aa210e02df6a892fe6386b080e7df66c0f001b31c54c93c714cb9cbc8964a1a81d1c0bcf7519b7327c38b726580aa0e2049bcb22d90fcf91808a11a9a6693cddb274280fb8efd9f90294ccc770c571b34d0236dcae5b8f4a310dcfca1f9c1c12458dda64f0f1556445d52df51a3d454f703bfc77d69bd67aa", 0x9f, 0x10040000, &(0x7f0000000200)=@ax25={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x7, 0x1, 0x0, 0x40}, {0x81, 0x5e, 0xfa, 0x6}]}, 0x10) 08:31:09 executing program 5: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x10000}}, 0x80) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="3d8fd78b2559f262f7eb5e2494335c2d8b4de9a914035fdb51e73496dc75c4bce9a4a140bc8f04beb3a9d8910c6693e509b8f311bd3bd14fb2f8617ac53f81317bd59d0a087b4648b72f157857730d8bacec4c625dc467d6f845d6e3b030e913da7c86c6a74721d9f8a8073ee201ab24ab6c71301c7c9c53c6b5b0ff7956054f5fa7989431249f0032676e91f8c6a5d5") r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xbd, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x1, {0x0, 0x0, 0x0, 0xfffffffffffffffd}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000280)={0x2, 0x2, 0x9, 0x204a, 0x5, "546bc3942aab91083e9c61a1541bb4d4a51c0d", 0xfffff800, 0x2}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt(r4, 0x0, 0x1, &(0x7f0000000080), 0x0) close(0xffffffffffffffff) eventfd(0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0xd8fa35c3af245cd5}, 0x10) 08:31:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:09 executing program 2: r0 = socket$inet(0x2, 0x80a, 0xfc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fchdir(r3) 08:31:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x10000, 0x32001) r1 = syz_open_dev$evdev(0x0, 0x6, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x4, 0x7, 0xfffd, 0x2001000, "11291d3e51f422a9664abd22fe381f602c41e1388a439b32b8aa611375e6e4e4"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 421.499758][T16211] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 421.511297][T16208] vivid-003: ================= START STATUS ================= [ 421.519336][T16208] vivid-003: Test Pattern: 75% Colorbar [ 421.525047][T16208] vivid-003: Fill Percentage of Frame: 100 [ 421.530919][T16208] vivid-003: Horizontal Movement: No Movement [ 421.537988][T16208] vivid-003: Vertical Movement: No Movement [ 421.544066][T16208] vivid-003: OSD Text Mode: All [ 421.549037][T16208] vivid-003: Show Border: false [ 421.554114][T16208] vivid-003: Show Square: false [ 421.559084][T16208] vivid-003: Sensor Flipped Horizontally: false [ 421.565461][T16208] vivid-003: Sensor Flipped Vertically: false [ 421.571590][T16208] vivid-003: Insert SAV Code in Image: false [ 421.578005][T16208] vivid-003: Insert EAV Code in Image: false [ 421.584114][T16208] vivid-003: Reduced Framerate: false [ 421.589548][T16208] vivid-003: Enable Capture Cropping: true [ 421.595776][T16208] vivid-003: Enable Capture Composing: true [ 421.601723][T16208] vivid-003: Enable Capture Scaler: true [ 421.607511][T16208] vivid-003: Timestamp Source: End of Frame [ 421.613879][T16208] vivid-003: Colorspace: sRGB [ 421.618610][T16208] vivid-003: Transfer Function: Default [ 421.624308][T16208] vivid-003: Y'CbCr Encoding: Default [ 421.629734][T16208] vivid-003: HSV Encoding: Hue 0-179 [ 421.635179][T16208] vivid-003: Quantization: Default [ 421.640340][T16208] vivid-003: Apply Alpha To Red Only: false [ 421.646784][T16208] vivid-003: Standard Aspect Ratio: 4x3 [ 421.652485][T16208] vivid-003: DV Timings Signal Mode: Current DV Timings inactive [ 421.660269][T16208] vivid-003: DV Timings: 640x480p59 inactive [ 421.666402][T16208] vivid-003: DV Timings Aspect Ratio: Source Width x Height [ 421.673825][T16208] vivid-003: Maximum EDID Blocks: 2 [ 421.679100][T16208] vivid-003: Limited RGB Range (16-235): false [ 421.685397][T16208] vivid-003: Rx RGB Quantization Range: Automatic [ 421.691871][T16208] vivid-003: Power Present: 0x00000001 08:31:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$rds(0x15, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r0, r3, 0x80000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 421.697692][T16208] tpg source WxH: 640x360 (Y'CbCr) [ 421.702919][T16208] tpg field: 1 [ 421.706334][T16208] tpg crop: 640x360@0x0 [ 421.710536][T16208] tpg compose: 640x360@0x0 [ 421.715736][T16208] tpg colorspace: 8 [ 421.719587][T16208] tpg transfer function: 0/0 [ 421.724295][T16208] tpg Y'CbCr encoding: 0/0 [ 421.728749][T16208] tpg quantization: 0/0 [ 421.733036][T16208] tpg RGB range: 0/2 [ 421.736968][T16208] vivid-003: ================== END STATUS ================== [ 421.765271][T16221] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 08:31:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x0, r4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r5, &(0x7f00000001c0), &(0x7f00000000c0)="2e791e08326a8ee920e61fea3396dc2149e07582ff71856edec01d82bd2f8df37e4e0a55a354c94b21a47de91c6b3d130aeb1b2a537a42f321b1fc1a0510535b210ab1ec5501e3a9593f8aaf20f3e24be7f2643b2b32e580b7858f4f123354f1ce6687500f2921ff264be2a5f8b89414327656fc020b6a1b02d7ea71a4a6685cc2f9287ec4bc30243ba4135cc89f80d83d64332afcf9e0d70956324514a947453376977411c2bb6f105e06aae52dd218a16df45f23"}, 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl(r6, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000001c0)={0x40000004}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r5, &(0x7f00000001c0), 0x0}, 0x20) [ 421.824947][T16208] vivid-003: ================= START STATUS ================= [ 421.832905][T16208] vivid-003: Test Pattern: 75% Colorbar [ 421.838525][T16208] vivid-003: Fill Percentage of Frame: 100 [ 421.844544][T16208] vivid-003: Horizontal Movement: No Movement [ 421.850722][T16208] vivid-003: Vertical Movement: No Movement [ 421.856867][T16208] vivid-003: OSD Text Mode: All [ 421.861773][T16208] vivid-003: Show Border: false [ 421.866884][T16208] vivid-003: Show Square: false [ 421.871801][T16208] vivid-003: Sensor Flipped Horizontally: false [ 421.878197][T16208] vivid-003: Sensor Flipped Vertically: false [ 421.884381][T16208] vivid-003: Insert SAV Code in Image: false [ 421.890471][T16208] vivid-003: Insert EAV Code in Image: false [ 421.896663][T16208] vivid-003: Reduced Framerate: false [ 421.902151][T16208] vivid-003: Enable Capture Cropping: true [ 421.908004][T16208] vivid-003: Enable Capture Composing: true [ 421.914048][T16208] vivid-003: Enable Capture Scaler: true [ 421.919731][T16208] vivid-003: Timestamp Source: End of Frame [ 421.925771][T16208] vivid-003: Colorspace: sRGB [ 421.930505][T16208] vivid-003: Transfer Function: Default [ 421.936232][T16208] vivid-003: Y'CbCr Encoding: Default [ 421.941646][T16208] vivid-003: HSV Encoding: Hue 0-179 [ 421.947113][T16208] vivid-003: Quantization: Default [ 421.952385][T16208] vivid-003: Apply Alpha To Red Only: false [ 421.958337][T16208] vivid-003: Standard Aspect Ratio: 4x3 [ 421.964074][T16208] vivid-003: DV Timings Signal Mode: Current DV Timings inactive [ 421.971855][T16208] vivid-003: DV Timings: 640x480p59 inactive [ 421.978028][T16208] vivid-003: DV Timings Aspect Ratio: Source Width x Height [ 421.985754][T16208] vivid-003: Maximum EDID Blocks: 2 [ 421.991012][T16208] vivid-003: Limited RGB Range (16-235): false [ 421.997326][T16208] vivid-003: Rx RGB Quantization Range: Automatic [ 422.003888][T16208] vivid-003: Power Present: 0x00000001 [ 422.009408][T16208] tpg source WxH: 640x360 (Y'CbCr) [ 422.014907][T16208] tpg field: 1 [ 422.018331][T16208] tpg crop: 640x360@0x0 [ 422.022616][T16208] tpg compose: 640x360@0x0 [ 422.027064][T16208] tpg colorspace: 8 [ 422.030905][T16208] tpg transfer function: 0/0 [ 422.035660][T16208] tpg Y'CbCr encoding: 0/0 [ 422.040111][T16208] tpg quantization: 0/0 [ 422.044412][T16208] tpg RGB range: 0/2 [ 422.048346][T16208] vivid-003: ================== END STATUS ================== 08:31:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_matches\x00') ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r0}) socket$bt_hidp(0x1f, 0x3, 0x6) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x9, 0xa44, 0x2, 0x1, 0xf1}) 08:31:10 executing program 5: socket$inet(0x2, 0x3, 0x800000800000001) rt_sigqueueinfo(0xffffffffffffffff, 0x32, &(0x7f0000000100)={0x30, 0xfffffbff, 0x3}) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x88, @rand_addr=0x7fffffff, 0x4e23, 0x2, 'nq\x00', 0x31, 0x7, 0x6c}, 0x2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x14, 0x207, 0x3, 0x25dfdbfb, {0x2, 0xf0ffff, 0x600}}, 0x14}, 0x1, 0x0, 0x0, 0x24058095}, 0x0) 08:31:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f0000000240)={0x4, 0xc, 0xe, "7df6d4050c480d9d3ada9f643d68b9c7da559ecce6b308f0a38fd28cee73bd36423ab2fbbcaa93a338bc2644c7a31d24a525aaa3a9f16fe7c56b3783", 0x14, "b9325eeb17d130eda76517e08872c7f5ffabe7f275d0927be4ee929a14dbea5eb75977aefb9b4012840b5e4db633db8fe4ee85ffd4bddcb1ea860370"}) 08:31:10 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x262980, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0xb4, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x9159f61c36057637, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/195, 0xc3, 0x2, 0x10}, @fda={0x66646185, 0x4, 0x2, 0x38}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000140)={0x0, 0x28, 0x48}}}, @acquire_done={0x40106309, 0x3}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/48, 0x30, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x2, 0x31}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000640)={0x0, 0x28, 0x48}}}, @acquire_done], 0x63, 0x0, &(0x7f0000000680)="c4af7d50e755a4c94bdc6eac7e577b1ef76f64fcfbe8fb6f01bf14fa6b10db3e1eb43606f9c4550b4ee86b51691d0f02a9e58777462e1bb7768cfe090ef5d4088cfbae154e061c82df1a4ac6549cbf25fc5bb09a1dcb303680621f1003880c84e6827b"}) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xc0d, 0x481000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000440)={@remote, 0x13, r6}) write$binfmt_misc(r4, &(0x7f0000000300)={'syz0', "43de4976a1e72a9695a8e2589b0976a1e5f76efaee58f409358079600b6fd068cc1c554f91c0aa1c6b67867b376a4dd4ad141d485b240c7c6c597125651a6281e9a81b2bd455243fd5ddf5bbf9ab10678401b18eb8dd6769cee513dc8c5214b599a9dfe79014a641df06794eeeb6111af9e36119f3bf2a977fb677a288e2b21f99b55515b5625d"}, 0x8b) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14) shutdown(r3, 0x1) 08:31:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) dup3(r14, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={0x0, 0x7c, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x2000}, 0x14}}, 0x0) 08:31:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x3, 0x80000001, 0x3f1e, r1}) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x2) dup3(r2, r3, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000080)=""/187) 08:31:10 executing program 5: r0 = io_uring_setup(0x64, &(0x7f0000000140)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 08:31:10 executing program 3: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x1e8, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r1, r2}, 0xfffffffffffffffe, 0xf9ffffff, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r3) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="f0647deb79c5093a14d0985d3c2ff2128fcc00f9a2b1b7a02094da715c81b976fe7cb2f2a24b871f5e5537f1bbb6703da6caf83c8a7e1ffa1ac59a3453d76312d92b44a5eee19f150381a0167d09bde322adc21e39db42dc7978d4625b817992bb8bf4e4870f0ccded1bf4a39d", 0x6d, r3) 08:31:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x201, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f00000001c0)="6718c66c0f3f869ed25a447bb15d927c2d1f08590738296932c95a1b80551b08e8a166ce24dd6d2e2c5337b48eac597a7c5a4cd93369361576c2d0cbcc8fbe20c1ae5354215c4da85fd0e66bd8b09ccbdde531fd56ecef6fc87fef178b4e2d9032698bc0890b3bac5d54fba09f1e0381589adaf50783947cab48ed0c6b5ce21637edb0736cecb9e5270325c336306d30117db32e", 0x1}, 0x8706c99df3991cfc) prctl$PR_SET_SECUREBITS(0x1c, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000000c0)) r6 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x400000) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000640)=[@in6={0xa, 0x4e20, 0xe0d6, @dev={0xfe, 0x80, [], 0xc}, 0xc8b}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e20, @rand_addr=0x7f}], 0x4c) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = clone3(&(0x7f00000008c0)={0x80080400, &(0x7f0000000340), &(0x7f0000000580), &(0x7f00000006c0), 0x1d, 0x0, &(0x7f0000000700)=""/140, 0x8c, &(0x7f00000007c0)=""/209}, 0x40) syz_open_procfs(r11, &(0x7f0000000900)='maps\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000300)={r12, 0xf1e}, 0x8) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$FS_IOC_ENABLE_VERITY(r13, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0x47, &(0x7f0000000380)="db9c6dd9777ede23c43ec6109aff6259ead316e34e8c568ee685a8e6554f436036bfa5ec0f1261653c4acabb96336f40dfcc564151ad850bc2e0810949189d08a66eddd68bf6b7", 0x1035, 0x0, &(0x7f0000001640)="536c7b3dfcdbb030a69bb57646f87cf17846a556bed5417d6efc34c1bd4bd876850adc227ec60c3003c1e216fbc67153a17daa2eeb06c1fda5b54836b394818817513bf26579d9401579a88e55e15d6fd73ff460438bd9c6630950a88b7b3bd6714d3f0f4fb2d42e1b4d550f3787ca5a2ffd8ab704c19744f6377acd1d17a6a25db7a8807cd9b88fadfd7a4ba6a5421f190eb69781c0616171a55864e70463ddb1c037874fc13aaec5cd67bc1e65c67be9cc77c7a3daf435abe19133d594c5bca9cf8ed2d7704b3d6d69613ec52d0b1f1c0f3fcd99414603dcbffc2ba29b1997e3487bf22dadf169f8c245b46c69227ffe0a4fd4cf75ff1dfddf661dc4bc1ca4c5af97b5f417dfdd86ba9c87cba7a1df10017297e83f9a100b97a55ba84193cdc803c88d730c7cf7d358da673d1358885cc5508674434aef017614bfce3516815f7050285ab5e2fe7f8948dc0fa772755016fd82a60bde887b4abd3d7954b4a19efb50855326e2c9010b365ae477537322ae3112243ff54da3ed45e750485eeaf2297cf6bf7126c4b83f6cc53b3e8a373a1031ed65b0ba1d890235ab77949e65afe850f929b472f9545d7d38177cf0ff96e1470ca0907a39fed02ba6397f747a2bf66a588071885b800dc7d789c4b58d61b3129f5b038d034ee07e64577cc5831148d7bca17b1aeb050d285b1e0f191d91f8514285d786ad23465bdf0d4ac3c6e5c3ddd6d4ede3fd65813f5a8e6cacbbb4cfc04efdcfb34cb7fd397aab90e667f0aa01d4f1d313b0f35a24fbe98ec73cb31d520bedaacc22e3e26a3ccc795d2244f3f8c0c6540fa03053239acb9016988aa988ee300124c0d40b8000d02614c6e2cc53f95e573b842330c00336f5452de743510f5b94a351c535ccf4a5bdeed87efed0b0d9306ff80e850341aec19b00679d5867fd806fcb7900751f59bcc6a289750397673ef1cf9732908b8dd50476a5a3499385037bd602a50609b45352614dd5f096be75be968653df632e03daa378b6ad6e1a17b57e92fbdae5ee306713440a338f7914933b00c92b25099a9cdf92c8df597d03dc8c905e71105f81edcadec980a003c0864c7b8a037a45d4c6ad935d8b81b1c9238fdff6b514ee5429568a43a198bf480d21b5193cfea8b6af02762f779a1637d7f070f086c6970226ab852e0f80b9de14c5e42996d7a5eef95b2c94c7c835c6710c809770e7e036b65247225f7d050fdeaa7a70924ba8710625c755633c39f867471cc98b6845cac30d30afd0c51bd78b76a9a09c0a07fd454a9ece8445f32320716f2344d276c542fa70b8c5b21ddf7fee55c2dd85c7cc3217b886f8a9a245c66c1a546f0adf4176a271f5289cb968cd7ce139ffea8108c774107ee714d6b3c26184cc3b2fab8ceeccccf4ac6cdf40db6dbdffc016237967a12376f7984033311c3d3574a3baa8ff4bc8e2c1090df0fc31ea0e97898c508083ab26d520317efa841ca6313cfab94ef2a3fdb50bf23924a49ca6ce3ed9a4e18b099de2fd9b4c4b5c01347d937a6e3ac04b4dec18153122ddfd994ba4d6b020b7a3d67195583f8c370c4009a42269b5de1f096b9cb518c4d68ebff1ff5403a3e9ab08715c4db95c96a8b3eb3ddb8ed8f6cfc82a540f4da85aa140c575f70c06762b82babd6fe7f96f5914dd688465208a3e968f4b9902c451c592bd10638d5dcda4f9a6f5b3429f54f9d5c3adacdc9214e30c805600dec9ea9cdb58a6ff256f5de5c20484305db993b1ae2da5a86fe14673e12ec04546acd0e6880eeaf1478d566a245ca9ed4e0b556e331f1ad3ea1bf017260d5ed63103c84fcec10178be1ea5ee1176470d88c6fed6f0174cdddeb2ce599cbc9495ef1481d7fc0a5f40d45dc7a8516ccf23a7b7b79f778cbc6e40b726953c2c5b112f874b252d59862d164dcc882aa7691cf2bdb23b6fa9ab26c47bfe8124777456de8b07c20fba4e79e916483bab8b1c65d9a7a3cd43d3e0547e592d2d4da030a55bda12afe4b293f48a904e254663408be73d194b28065c771db88ba53b03739c84acdd98f0ec82577dc14c1f065ec4110a0f44e9357a14f89869a5ef0377ac0592ec1ac58c216b1eb2015a694648b94e6725e5b428439d70c2339f0db688205cbcd362344eb835a3eeba7f15f82622e465b71cf42b5a84af3441fd0e2fd77a896d3d61184bb9e6e70601d3770fcfafa39d9e1e1dbfd9a143ef60909b17ae2fafdb05a837d6db9954a553c24c40b093475851984e122cb5ec2fa12abc54bd4c10fe1575b7608eaf36d6e1da9c8dd46d8f434cc58199d1132f2d6216af4a34b45a1823a7c0d3f935fba64827245645a8f25162a8aef34cb408c7dbb946f1b77d558a7d44499b82ac84350962cb0f4a3b7df0b7dc462c772d012e4bdb9c115f7871aec43ab296ccdc0d98d45c6216d15bb329bbb81da1940eec0c5be1568aa214dcd5e19e03db35ce179c8214ad6060c465612895ceb0cafcfaf6a9d022949b5806f7c2c726799d3aaa76395f22c774f808552b2d7711b73c9ac378f816a443bf25a8b77daeb13cbd120c01e5f7b5258bbc28c13736dbf866c3791ae4dff765d08d6d883af97565d8c7b24c4653a09cdf8d686fb756647c840836ebc7a37b01f6d9f42838205cfd1dfc79850b4f18feab9b1c5483a8d67b619a51c7f800aaecab9f930b9b94439a4ad24ed351272692423d2116fa98d81fd714ad74a1c3e1eada9806d239a4b8538d89658f830bb3c1da250d411dbcd658f1ed3b5c9f9ef86b5b6b043cdc0aa0b2a5434ffbd406437b7b6b2e60ffaa5b42f2a189965680d98b28393f307dc8d8f00df70255978ce1a608ed8479aee1d7bb894c70caaf624d90051f4073d7798043be878b44ce1785d4273f44100def2cd615586202de9b253b117cb533c31d63930eb95c0f97ff746855ca34eda0b228c534557bb2f0e96f612b1da94386c457471618c4d3842b28b1b437b3533c633d13d69bfb5259fcdbc1f89b61cba3050e9a1f72c2b600bfc99de65c91101d637ae1ac513e77943b26938819d87d6cce62bd62679b253e08d05990483db1295a6de4de3932de6e68d656411e43c94ed17472747c6770c1e174743232e99f204cd06d40bc2a8f4bd8c9ffd1d93a82f87e4a858ec7ce16f92d7365fb9fb7cabe75dbb3e2d2a665ab1f3bf8d5948ed621d2a4913e99e9b0bbacc5817d799be7de71148df8d5d3bc9c89435ffb926bc9c24a648440bf56d395bfac890ef6d61cba03f1ad45edd267e0e076fe45d5037ec3a4bc09e4ad2cbf64f56c80ef3a376e5165b1727f1b153d6621a189452babd2f07be8f7ddd1d7905f514933c68c463e11378e54410cc295f618c780b8abfa7b79b60078be4cd45a742171d3c94dc68e43b5bc4b35e3eabbcca40289c28e130ebfce9f38f3b953246f4961b14fb1da10b448c7c880dc828005366da0e7fdd077aa9fc046ab908679310f04b5e3a98dfa1fb24df87aaa672f133ce36a4d275b22bf7d49ed6ab94136de63d6749aee2dbd2bcff9ac20e08ec716a3191e048eaa525f0110258630a5f78dd1b17e35f6aa896ffaf27ba5ec0e8a739d97a01a844cd58c96c5a1165d6456c74f4a1d8408d4888598a355717b1cf5728d2a08f41232b3275ab696f194e9a76d245bf269743503291fe6afaa6d43833f3d8094b92f6ab5362955bf6a8271adc948c8aa77c9a45ab4c73771434e9b87f2ade24e5307001db8917a4ddbcc5190ac7cedeebffcbc086ba68c15d0214fb3f5995d82507ef382ba410c5853f67cb4c0e894d48e6e6b440ddeaa8ccff9f461d40c90dde145af07ac2de722d89b510ddbe7b296e1a6e2e0760dd0fd50447531ff2e4c6d6a3d6168eeddd9c9c6de3878853a5ef63fa831d67205f65e8e726c9a8c8d8c5b13bb05cdcfe7fda967413fd4adcce5ee5eb80e14606327f29c79bff95ae36c66f80d5ccf6ce712cad304236d215c04055e40edb02e904e1cf6be8bcc06cf1e311d3f921522e5f325a7abddf028020e986997f994c7a91c3186f84a57d5cdb02448941dff2f05bffe0e551648274ab64e953d3f0d360da7c33de29367a4194b7731992131469f37f0442a24ba21aa3ec03aae333271237a32c3c37b80ac28b071c2fde0b3a9621a4dbc87ecd2ef5d19c9e61acf59a45cca5183ffc96c2fa9df71a566ffcb9556127119153805986360d1eaa3daa62073ad9fcdd216cbc3db5f71e3b5015701e7e09a4a17d2b8e6bc79815055f82d0cf1669c58daecf847257351af93cda01fd3b6460f698320e353560d38963c0a043d87e5a737b9ea736d13917fe532402464180a9c2a73dfaca7dce711603c6f0c4f5260f22f26e3ea6b4a6ebea077cc130505e80a247cb69b007b3e12ab07a9b93c04f7b452fe3cf2392894c80f8e8666782852273181b952c8495511571e919dc7a6d9825a2aa3dfececcdacfa94065c812b2bcc116b1800476ebdf34d8f93be70a82b0377dd4b14d8402f542455a156cc15e4a6f9c6a49f93d75ade068020f12af7d47c263d23fc451c834b57c898a16c06411b275a7e34671b22bf41edf17877a565781933f09613b03c9e3c3486220d616d9c8ada827150f130923269f7f15f693018cca17d5f30877e1343d8b36e1949ba93d48eade0dbfa01c01bd7da7fc95f863f04ca582c73313752e79de838eb5f5f80f84594d22604f43861c5a84df462694e115c730ef815472472c82b4de619193e2ba8ac1e48618a17f076e9d10a64935b77be0844285c8ffa1779d690b7e56b39f427ab09d828874dd723eee98d6bc4cbe72adb9dbe2f41636d278a79af9279dea6c84cffe3f14a0d99aac297ab9d21ea58de72e81e798bfd8563b279b2964fd7e068064e2271aac74db81c4b72fe9cdcf1519c724fb820effc06b025b0280529936f646eb393b2c18a65fea648304424ae8ffe9780de4cbce0723390af67e9909cd4559ad5d3ebead16ea5aa9c3f2430170b87aa21c2b42d72e6e79e0bac25b8059f90da78f96e99e29d7c10386bcdba5c41be57bf4da068bfe66c31913b799b770963bb8d441bda2d8ebd5be68b2d3297c309703297e8aa3ab8c78f2e8ead8021c9432f877a659c1da0d51cb38271f32b23efd1919a111de49195bd885174fcdf97a25c9a36942537227d13179c8ca3f3de9a191c69a76c7f174853029807ef3ec7d6837aa541a1a0dd33dacb0f85a80489b2b84a52b0eb8565bec79d93a846660f7a72645d8c37042e1dee7daa4ba2d51d5a4076b73ab955d41f9573c426ce5daba364bba5c9770d8ea377cb8aab6054364f505a8040ac5591c17fd174fc558fc78f46053dd29a4c7431a438db6a606ee8e82ddb05270f4073c572bf81e61ef7bcaa1a817ca1baad93d73c50e0294cf6289cd6f7fc44c6617b3fe8167a86f514db752572e20ce155b05fe4d6f7b492cf689f776ccae2570eb3b0cbbd5427b80d19355962622a1b1331aa26f85fa779219f2873b6068ea975d10eee666e154681d903cbcc935a2cf5bf105f1d0e9178c737c4158dd2897cc31f5b6973771d85e888b0c11e11a2093127653cb56ce7194bb1d5cf98c1cab469cb2a19f4e44eb050b0a7fb19d46aa0616e37c92c30ef1f056f53a2cef458a3b1dbbed4d4e9e33fc980263268fe0411dd44bead0038900df939486194fd09369e9807530a45685128a0363342a58ed95718296c1df35e543301b0aec0913a57fdffeee33b88b24bc974360b9e85cc75c85dbe37705c5dd76f932efad2a26b9dc15eb887655609bdbb5a964f6aaabdcf2b6021880000000000000000c394c4571c168f9c01268bb5d31d18ad18b27aa16c25a07047f1e14759332872874031c2186cfb1a1262f0a29b96aa09812af35259"}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x7a, &(0x7f0000000400)=""/217, &(0x7f0000000140)=0xd9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r6, &(0x7f00000001c0), 0x0}, 0x12) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f00000002c0)=0x10000) 08:31:11 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r0, r4, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/187) 08:31:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:11 executing program 5: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000200)) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1f, 0x6, @tid=r0}, &(0x7f00000000c0)=0x0) timer_delete(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$uinput_user_dev(r2, &(0x7f0000000440)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) 08:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000ffffe7ad100001040000000000000000000000001522592a4b32cad57639b3061b6c4f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080081000000"], 0x3c}}, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r1) add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="0fe084dd6a4947028574ac01e6a429f45302548f77c3971dcdda0333984df64afbd20e1f23cdf6624c800ff12847d37bd5d1151976e08f4a9daab38edd20da4196c6b9500d938f76871030e2494327315143e1be6b5fbbea0f9643fb4e2d235d4f20d70b0e7d4b8424380e91785490d1f403d7219cac0ac5819b60afeef777a924925a23718b7b1fa551d241c421d198dd90d7a2b54db207e37fd867305f0109cab1ef2e1de5055bf81bbd6d286f775ef0a7865a2914f72734ec250643ecd893753d1c8ad673bcb4145ce705e212ee51d3e5ff", 0xd3, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r2) add_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="cd512aede1900f30a07ed5efa187968904f82d7f556d1069bdb7c88448a2d75d9902be23a92eced415c2cbe56a", 0x2d, 0xfffffffffffffff8) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, 0x0, 0x0, r3) arch_prctl$ARCH_SET_GS(0x1001, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000140)) keyctl$get_keyring_id(0x0, r3, 0xffffffffffffffff) r7 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000000100)={0x3ff, 0x6, 0x3, 0x5, 0x7ff}) [ 423.261179][T16287] input: syz1 as /devices/virtual/input/input14 08:31:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) socketpair(0x8, 0x6, 0x20, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x1, 0x10001, 0x10000, 0x6db}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='2', 0x1, 0x0, 0x0, 0x0) 08:31:11 executing program 3: socket(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1100008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f0000000240)=ANY=[]}, 0x78) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x6, 0x1, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x8001}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x1, 0x2, 0x4, 0x20000000, {0x77359400}, {0x2, 0x1, 0x40, 0x31, 0x58, 0x5, "2353d039"}, 0x837, 0x1, @fd=r5, 0x4}) 08:31:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000540)="6bd50c68061b1db09cbf0766d198e8b930dd31419fc75134c30ec296663b280d78bfa4ace58877b1c51f5bd5e854bbc99edda8d13bcdd56e0b41dcff69d8d5a53add931277") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac000000210021000000000000000000ac1414aa0000000000000000000000400000000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001f000000005c001100000000000000000000000000000000010000ffff000000000000000000000000000000000000000020000000ffffffff00000000000000000000000000000000000000000000000000000a000000000000000000000000937c0133712765f2389b79ad748dd81c55d4020441ce8b5e2e01abb472a47164d118325d3766f37d53ae34ae005f0406913f4655141cd1c56d53648e1ff836e6031478b946d61d35eff4e60740af3c9eb887d5848a09e67aeb587f16cdd55eb198292a1957e463ab4132a4ee449eb752abeb8f50131f0636729e5deadaf81790088fe6cf120d3e80a14a9673b7a803c7f4f3ad6d9daba70de0c96fb12fd1af820e8c"], 0xac}}, 0x0) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r3 = semget$private(0x0, 0x3, 0x100) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000140)=""/89) 08:31:11 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000000)="a8", 0x1}], 0x1, 0x81003) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, r0, 0x0, 0x102000002) 08:31:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000200)="8e3534fcf5e0e2c7d5746ff5cf4b9cd67bf122772c94e91b8974c96f89bfc20e043229736d02473522d45837873b85c1859a6447cd41e3fafdf8e77829e0eddde4b9daf661c8ea471b3e423891286d808dadd4a59b85684ff1f2f0e7227955dd71c36203b2dfb0170075e9723516d1ddcd7ffa68666c060000000000000036c1cce750f6d530c241b9f57f265d6049786cfec352142a4961bfc722e399e5a43041f08b39fbb68ab8fe5bf3795b10befe191bc40273cd366b7dabe2a3c31a27ce600d6cfd2b0d304f0b3546f56f87b99dd75b", 0x0}, 0x20) readahead(r1, 0x3, 0x77d8) 08:31:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) [ 423.782730][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 423.789097][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:31:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x7530}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:12 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000180c200000086dd60c8fba200672900fe880000000000000000000000000001ff0200000000000000000000000000014e214e2200679078c2060001c0000000b638d36588e1f4fece7681bff44f11a025dbd03438353ce13b646101657715150104000000000000f542163e5d287820e79da0a1f0cc735abe2d817b34e75104f0890128690416fac33f483b8d2a0f670001117b95f31f"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='\xf8\xff\xff\t\x00\x00 \xff#', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000000c0)) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0xe30197a191cc38f7) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$netlink(r4, 0x10e, 0x6, &(0x7f00000001c0)=""/161, &(0x7f0000000280)=0xa1) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) 08:31:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x7) creat(&(0x7f0000000000)='./file0\x00', 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x1f, 0xffffffff, 0x8, 0x9ed, 0x200000, 0x7, 0xb, 0x2, 0x7, 0x1ce, 0x10001, 0xffffffffffff8000, 0x2, 0x3, 0x8, 0x8], 0xf000, 0x1040}) unshare(0x40000400) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x2, 0x4) 08:31:12 executing program 3: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) eventfd2(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x80) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r2, r3/1000+30000}, {0x77359400}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @local, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @loopback}}}}}}}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40100, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)=0x8) 08:31:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) [ 424.188512][T16351] IPVS: ftp: loaded support on port[0] = 21 08:31:12 executing program 0: pkey_alloc(0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000000c0)={0x98, 0x7d, 0x2, {0x0, 0x91, 0x9, 0x4, {0x5f0f90857eff1f6c, 0x3, 0x2}, 0x20800000, 0x7ff, 0x2, 0xac1, 0x12, '){keyringmime_type', 0xd, 'wlan0vboxnet1', 0x36, 'posix_acl_accesstrustedbdevsecuritycpusetGPL*++keyring', 0x9, '\xe1vboxnet1'}}, 0x98) 08:31:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{}]}) ioctl$KVM_SET_LAPIC(r9, 0xc080aebe, &(0x7f0000000180)={"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"}) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000180)={0x5, 0x400}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='/dev/input/event#\x00', &(0x7f0000000140)='/dev/input/event#\x00', 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = getpid() rt_tgsigqueueinfo(r13, r13, 0x16, &(0x7f0000000200)) ptrace(0x10, r13) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r13, 0x0, 0x0) r14 = syz_open_dev$amidi(&(0x7f0000000580)='/dev/amidi#\x00', 0x0, 0x2503) ioctl$KVM_PPC_GET_SMMU_INFO(r14, 0x8250aea6, &(0x7f00000005c0)=""/217) [ 424.280752][T16355] IPv6: addrconf: prefix option has invalid lifetime [ 424.329002][T16355] IPv6: addrconf: prefix option has invalid lifetime 08:31:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2000) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x1c3, 0x2400c010, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect(r4, &(0x7f0000000180)=@nl=@unspec, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r6 = dup(r4) sendfile(r6, r5, 0x0, 0x523) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect(r7, &(0x7f0000000180)=@nl=@unspec, 0x80) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r9 = dup(r7) sendfile(r9, r8, 0x0, 0x523) r10 = fcntl$dupfd(r5, 0x5f70364422de88c3, r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r12, 0xdd42ddecb798d42f}, 0x14}}, 0x0) r13 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r14 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r14, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r15 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r14, r15, &(0x7f0000000240)=0x202, 0x4000000000dc) r16 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r15, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r16, @ANYBLOB="050c27bd7000ffdbdf2503000000bf8860e7dd2f5d3a851cbff13383"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000000000000c00080001000000000000000c0008006c000000000000000c000200f52c2f74000000000c00060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) r17 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x481a00, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r16, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa0c}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r17}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x45486d686cf8811c}, 0x44002) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r16, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x7577a56c2c18edf) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r16, @ANYBLOB="000129bd7000fddbdf25050000000c000400ffffffff000000000c000400c0d20000000000000c00020009000000000000000c00060002000000000000000c00020007000000000000000c00050000000000000000000c0006000300000000000000"], 0x68}, 0x1, 0x0, 0x0, 0xa4041}, 0x40) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890f, &(0x7f0000000080)="08dca50d5eb87bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:12 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1, 0x8, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="6c0820dd5e95de32b6f00cb40f5f0f9e00669745aef3b895b8cf", &(0x7f0000002180)=""/4096}, 0xffffffffffffff47) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r2, @multicast2, @empty}, 0xc) socket$can_raw(0x1d, 0x3, 0x1) 08:31:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x8}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f0000000140)="a034b954430ee80f6b4576356c9f5998b779dc6be66ba6e9c3fef67b22fc824451eaa12550dd4e9affe38783e05e736510bfd0c45702e02a104efa862e6a38c5a2086897c18d0051afc1fa0b896d6691808e4a0a3aa287a2a691d94e68d1df7c6afb0fa8334880a6b74c9aaedefd8b51422548efc939a803425aff57778a756b5465b9f6d7ee9f088624fa7761d76d02ef2d3e271b6b08bf26e02d706c75808c118cf404bdc2bda0faa055c5ce39c013d44832442432df44f6ff1df4cce0036501fe8f1123b5be112debfcef8c70", &(0x7f0000000240)="2e7e1d4b8c2acd18fd6269bb01f49be979d6953c7f93db34518d15a2bb5fec943c7ac972081b9bdf1f7e1ee8758fbc7bc9c67598dd36a3b0bee92ed0ed715d9950456d9942ead61e6f00ce4c4f432bce0c03f5e8772fc4be275b541bf2049d2eba09227b7c626c6c30e83e62fd64f58430f0f6979315a2330ab5a117241db056138b4fb33147c4450814464b8f405e906844b830584d65c318557b14d5124e9c75fae79c67bb8129e448bd703e062f064d1c13130573be9e2c1e23fdac53b9cd97669cf007ac18b15b9c8e733d3adcd276ad629f5ed96cd677ef9fba63bc85b126b8124e22324d6a361044131e0ea91050a227154fda9105feec9ae95a39f0017bcf43ad45e6c7e5c9a69c19f5b9ead196db267037526925296678f9ca78e0089fc9a89e2f86b9350ee848a2a55a205e3aff77371c57b9e3eae778dd874deb51c0a3b61b120e0c21e31b4ccd46cfee6ffc275de92cbe9c4170e1cc015dfa4bea482f9422b74bca1e2fc673b9ead9cc542216b7e6a09a63dd6f43bf7d2a46d332a4de3dd335d128848fb4e46a6eb75ffd42166827a7d4f969e900000000000000000000000000000055bc66d2fed058f227fc0a019ed8f228a5880b1c85ed95118c0f533ec419a2fa07d47a72345ba89b7568510b93242f25e42b37d6af1ea061712bac9e6b61574c173d15a6fff853d16741bb8b8a50c2fb4ee6f134f6f54a9738982d2aaffc3b2210ebc1118f6bf1429e46f4dc5a5e16a2650d6cfe5c584e2de722140132d7"}, 0x20) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") pread64(r7, &(0x7f0000000040), 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0xbc, 0x9, 0x2}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 425.058395][T16367] IPVS: ftp: loaded support on port[0] = 21 08:31:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60d8652b00280600fe8000000000000000000d00000000aafe800000000000e4ffffffffffffffaa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a010000090780000051200"/28], 0x0) 08:31:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r6 = dup(r5) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r8 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)) dup3(r7, r8, 0x0) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000000040)=""/180) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3d) 08:31:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x7ff, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x7}, 0x122) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:13 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xbd, "2bb09ca83419ed67c4681b04ff2267fbe0c65d2373b2486c98043c6f13c21d6041acf9a144e64f01ab1033e2182b42b35dd55ee76f016a7ad583be58ddc4d7074178e195f98d7745424dace9199824efae3ec5e85ceac5ac7f7dcaae257a9123834e1447888ee9f95603ad76c87941fe8ef11083414ed5f1881d7e5ba5eeeea437a0d5d0b1c8c2c643bcc08966427617c5cee7cc112b73af11e9ca90d87ec160ca1481f019e6acba0148fd7a8fe17b81a100fbea6b02f77e8c9788d8bf"}, &(0x7f0000000140)=0xc5) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x3}, &(0x7f00000001c0)=0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000280)={0x3b570479aff0b2de, 0x8, 0x8, [], &(0x7f0000000240)={0x9e0903, 0x7ff, [], @ptr=0x27c}}) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x1f, 0x80200) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0xd030, r3, 0x8000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r4, &(0x7f00000003c0)=0x4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x640002, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000) r6 = openat(r5, &(0x7f0000001480)='./file0\x00', 0x4040, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) read(r5, &(0x7f00000014c0)=""/74, 0x4a) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001540)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000001580), &(0x7f00000015c0)=0x18) r8 = accept4(r0, &(0x7f0000001600)=@l2, &(0x7f0000001680)=0x80, 0x1000) fcntl$setpipe(r8, 0x407, 0x3ff) r9 = syz_open_dev$mice(&(0x7f00000016c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$TIOCLINUX5(r9, 0x541c, &(0x7f0000001700)={0x5, 0x7ff, 0xe3, 0x4a5, 0x81}) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/dlm-control\x00', 0x200, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x0, 0x4) prctl$PR_GET_FP_MODE(0x2e) r11 = syz_open_dev$sndpcmp(&(0x7f0000001780)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80000) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001800)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r11, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$alg(0x26, 0x5, 0x0) r13 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001900)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r13, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40102c2}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xe4, r14, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x49}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x84, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x56}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1836ecdc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8abff9cfc59ac8bf}, 0x8000) 08:31:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x80000000}, 0x28, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:31:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) [ 425.863978][T16423] QAT: Invalid ioctl 08:31:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000dbb000), &(0x7f0000329000)=0x4) r3 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000400)="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", 0xfffffffffffffda9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$dupfd(r3, 0x406, r4) [ 426.004293][T16435] QAT: Invalid ioctl 08:31:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffd, 0x401) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000580)="f6d5403ccbab82bb0ba0ee080e9f42c103b634bbc041d9b23a6e0ce554a5e505b185f547f9fb60fd76e46c080a1dbe8612661e2a253f3607ddbc12d7f839f935d60fb69a40017ebc30014a05bc7ff8027e09450423c945fd90491c280a6e28bdd4f85b107721996f11af44014509aa0ea19eb3f8d5c77f2fe4788f640e659ca03902d1407a255ec396ec6a141f585a910145a704da2c7793c9607b9047abfcc84bba3d42bc", 0xa5) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{}]}) ioctl$KVM_SET_LAPIC(r6, 0xc080aebe, &(0x7f0000000180)={"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"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000640)) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8040, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000700)={@ipv4={[], [], @empty}, r11}, 0x14) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xbcdf5007189c1bb1, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000040)=0x9, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r0, r1, 0x0, 0x102000002) 08:31:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b8010000000f01c1f30f2d0c62660fdff3c7442400924b0000c744240200500000c7442406000000000f011c24660f38808fd734ae97b9b50a00000f3264660f38800866ba6100ed660f38dd0d00000000c4e211ab49f8", 0x57}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x500, 0x80) ioctl$KVM_SET_SIGNAL_MASK(r8, 0x4004ae8b, &(0x7f0000000200)={0x9a, "d88cfd36d83f4a34a3c00e71c3df2a508c7014de7781960270d0a67a956581b3f24b116f2e8439805f2642d05f7e351e036a22aef92027411780f7e5c3afb8d2cdc4b31520a09f97318c0f511ea02592797e63a5c86698b9c92db7d9e6de209ba9a6135bee7f59534be71b401ccafcb36f5b31a8d5d30b3879020f1af47aae76abde64e0e059b447343e9bd55a6239f9f01e444e3893c4c77b7e"}) fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0xeaba) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:31:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:14 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f00000001c0)={0x0, {0x9b51, 0x81}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001b00)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 426.517278][T16452] kvm: emulating exchange as write 08:31:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000040)=""/36) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0xffff, 0x4) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) [ 426.692531][ T17] usb 6-1: new high-speed USB device number 14 using dummy_hcd 08:31:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendto$inet(r1, 0x0, 0x0, 0x10000000, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x2) r6 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) sendfile(r0, r2, 0x0, 0x102000002) 08:31:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xb0001, 0x0) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x2, 0xfffff800}, 0xb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa0000000000000004bc0ee1a268ccd2c2f4dce1d94ae4d18d800a88628abea60f627486e5a203f59bf12adca250255b389fe8aa54bd7805c4ff07740578e38f11d26ac52120ce2834a17b0e1f64ab4dd0823194cd19f70b777ce1f4311407eb1e21d57bc225ff1c1bee07960fc94c5e26f80dc6248c34e4f6e99f48eb63141fdc987a7b35e11510d036be4def74fe24642b80d2e16a00"/173], &(0x7f0000000040)={0x1, 0x1, [0x5c4, 0x4c8, 0x25e, 0xca4]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x1, {0xe5, 0x0, 0x4, 0xc5}}, 0x20) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90), 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 427.052647][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.063834][ T17] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.073792][ T17] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 08:31:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000000)) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 08:31:15 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000300)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x10400, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000002c0)={0x0, 0xffffff7f, 0x2, &(0x7f0000000280)=0x7}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f00000000c0)="35d437e0235c", &(0x7f0000000100)="c136c116d24dd1e085ee12e40a1e8a4656f2cf5a23b9e9eda3b6269dc5e0fbc4f5162c5475e20a35ab0d378ae2b1d47838da67e05072107306f47364b0fd7e9592f2442a610666ce198886e3d9b7dec68a3b0f87b221cb8e0a707271228191710be0db59493454f4e2cc7d56722db6571396cf60fe29d19a58ce888265f452b2872ef6180c6ac4d8d0b78a3dcd75240ef37f3d9f29334bb195fdec31d58ee276c24b74e375b970d2ff554b", 0x5}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000200)={0x0, 0xad}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 427.252853][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.262131][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 427.270266][ T17] usb 6-1: SerialNumber: syz 08:31:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000000)="610f5e", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) [ 428.031257][ T17] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 428.227012][ T12] usb 6-1: USB disconnect, device number 14 [ 428.234376][ T12] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 428.992202][ T17] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 429.362316][ T17] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.373559][ T17] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 429.383667][ T17] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 429.472521][ T17] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.481747][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 429.490003][ T17] usb 6-1: SerialNumber: syz 08:31:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40900, 0x0) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) 08:31:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000100), &(0x7f00000000c0)='\x00\x00\x00\x00\x00 \x00\x00\x00', 0x4}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0xfffffffffffffffd, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/\x00\x00\x00\x00\x03\x00\x00\xdcl\x82]\x00', 0xfffffffffffffffb, 0x501000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xff) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x400c0, 0x0) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x4, 0x2) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100b900", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r5}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000780)={r5, 0x1000, "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"}, &(0x7f0000000080)=0x1008) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x1f8, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0xffffffffd927d9bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x40000000000, 0x0, 0x401, 0x0, 0x9, 0x1000000000], 0x0, 0x40012}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_NMI(r6, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000017c0)={0x0, @in6={{0xa, 0x4e23, 0xbb56, @mcast1, 0x8}}, 0x1, 0x4}, 0x90) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 429.763455][ T17] cdc_ether: probe of 6-1:1.0 failed with error -71 08:31:17 executing program 5: r0 = epoll_create1(0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x4e21, @hyper}, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x7f) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000340)=0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x4}) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400400) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000140)=0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x16, &(0x7f0000000200)) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r8, 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000380)={[], 0x2, 0x100, 0x5, 0x3, 0xfffffffffffffeff, r8}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x8f, 0x0, 0x2, "abdaa7e46682dce81dd562f1e62c8213", "fc0c1a5f011e9fbf3f74ad5ff691da2c89970182098aabea30ba89c339dd9371bc28f5c895b4d6eb47be3d9adf82561119660f33ee521c44d97c736bd31e47691266c4e40c6a10423ea5b7783e440dcd8ee325cc73054ba73c65034dabdbd7c49148e35014c3fe0d42d94731f46ab8c5f33ddf2a6857ce2a2e6d"}, 0x8f, 0x1) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x169, 0x0, 0x0, 0x3da) [ 429.816973][ T17] usb 6-1: USB disconnect, device number 15 08:31:18 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x100, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000340)={0x87, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e20, 0x3, 'sed\x00', 0x4, 0x3, 0x3c}, 0x2c) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) lseek(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20) 08:31:18 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)) dup3(r1, r2, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/184) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) dup3(r3, r0, 0x80000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/187) 08:31:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) write(0xffffffffffffffff, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:18 executing program 5: syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b10dd0051d4eb79469ece17d9f16bb455456d0576440402b130b000000010203010902"], 0x0) 08:31:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000240007050000000000000000000000004817522c4ddde06ce028e1f7164837db", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007166710048000200"/92], 0x74}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0xe, &(0x7f0000000000)={@remote, r7}, 0x14) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) 08:31:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x4, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r2, 0x2, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000000c0)=""/128, &(0x7f0000000140)=0x80) ioctl(r4, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x8200, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f00000001c0), 0x0}, 0x20) [ 430.401225][T16588] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 08:31:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) write(0xffffffffffffffff, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) [ 430.633916][T16588] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. 08:31:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) 08:31:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) bind$isdn_base(r5, &(0x7f0000000780)={0x22, 0xfa, 0x7, 0xff, 0xfe}, 0x6) clock_adjtime(0x5, &(0x7f00000007c0)={0x81, 0x1, 0xb2b1, 0x4, 0xfffffffffffffbff, 0x20, 0x0, 0x8, 0x667, 0x8, 0xff, 0x7, 0x1, 0x7ff, 0x4, 0x2, 0x1, 0x3ff, 0x4, 0x1, 0x6, 0x6, 0x0, 0x3, 0x7, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'qfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r4}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{}]}) ioctl$KVM_SET_LAPIC(r10, 0xc080aebe, &(0x7f0000000180)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fcd2a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000640), &(0x7f0000000680)=0xc) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r13 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r6, &(0x7f00000001c0), 0x0}, 0x20) ioctl$sock_SIOCDELDLCI(r12, 0x8981, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x101}) 08:31:18 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="2d000000000000000000000000000000000005000000000000000000006f1e473fe77117d1190d51000000000000000000000000000000002aa724d46f08cb864c792126f7a57a34e0cd4da3efdde4d6a413b6fc8933c5ba17fef167ab5e8167f8ce95f740e2332efb7ad754d024cf6897b28e239583da40f93b4a8abd2abc96ef2cb91b91eaeccf3bb6408750591ba479a2bf7ffceb15bb7b536418cb59743636018fcbaf95bf0a9f57793fef8229fbf0f6c91f47f110a3ef124e0a610bd7b4cba1"], 0x2d) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r3) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$TCGETX(r8, 0x5432, &(0x7f0000000140)) r9 = socket(0x10, 0x0, 0x2) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r11, 0x1) ioctl(r10, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write(r10, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r12 = dup3(r2, r9, 0x140000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r15 = fcntl$dupfd(r14, 0x0, r13) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) mkdirat$cgroup(r15, &(0x7f0000000000)='syz0\x00', 0x1ff) ioctl$EVIOCGBITSW(r12, 0x80404525, &(0x7f0000000240)=""/213) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) write(0xffffffffffffffff, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400, 0x0) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/194, 0xc2, 0x1, 0x2cfaa76d, 0x3, 0x9, 0x702}, 0x120) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x3, 0x1, 0x6a, 0x2}, 0x8) 08:31:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = socket$netlink(0x10, 0x3, 0xd) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40001) 08:31:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1, 0x10}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200)="2e8ea754c6715687ca3b989301d958375bce3a63b6128713487581b58132a4aa1acfcb54326e58c02f404adb7374c0dc2c73e96a25400815e0213dcbc3d6050f57b616811d30ace747a98d6fe9b08ab4866f516abc26fa1b55accde1c6785eb1cea086ec469a973f3007d61c2fbb13aee18ef714e926859d1b32be4b61b005ab73bf58bddfcf1fe9863cda1f483d5a4f3c3f02920d07a786d7a0c0e1e2adb0d97101b8626db5256e192bb2d52feac7fb01db845bf7881b6c91d73034ff894a173e9f15a02d9bb5421972928b3d29f22fd871", &(0x7f0000000180)="ad7a0bfa8fb825fdd43a2da05e35c3d70aa50000000071a2ea9fb054a8a133b104b4b0101625b88eff037add3ff4ceae1dd16ea78ce78f3cc21423f89bcb81820c07705e241081c6ab7dab949363c97f9c10637972a1ec4a814a9facca5653f8c6ff07", 0x4}, 0x206) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x30000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/d)2/*e\x853', 0x1d1980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$sock_void(r6, 0x1, 0x24, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000140)) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x134) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f00000000c0)=0x7) 08:31:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000240)="be68cd6668ba2eec00f0f841cc74dd5b73ce7495cc17528370f51648fc47d194d9211779b6ba9e60657735c0ccb942959eb9dea8697b44e0324277021eda452d4ef594cb597a160a981d33b8697d68a6daeb33f01968c3af69a26b4ab177b88fe23a2f136160a859d5a2a85a74a26878f5622d00f76c2938c33352e6aee89bd9dd1a7a4ed0ee55c401011734", &(0x7f00000000c0)="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", 0xb49992773883c815}, 0xfffffff0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="08dca50d5eb8cfe47bf070") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0), 0x0}, 0x20) 08:31:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000105000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000120012000c00010062726964676500000c0002000800250000000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/118, 0x76}, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x5e7e8d5138ee0f6a, &(0x7f0000003540)={0x0, 0x989680}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "797e262516d5c4f0", "374ad9518c6fb84776715bf2f6e8a60b", "0257b27a", "c9346141d482fa13"}, 0x28) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl(r2, 0x5, &(0x7f0000000100)="c194d5f125c1") r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x200, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r7, 0x1}, 0x8) [ 432.379681][T16688] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 08:31:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)) dup3(r4, r5, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f00000002c0)=""/82) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)={0x4, @loopback, 0x4e20, 0x0, 'lblc\x00', 0x10, 0x0, 0x25}, 0x2c) dup3(r2, r3, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000140)=[{{0x77359400}, 0x17, 0x100, 0x7}, {{0x0, 0x7530}, 0x2158b439da000454, 0x8001, 0x9}, {{0x77359400}, 0x17, 0x800, 0x8001}, {{r6, r7/1000+30000}, 0x11, 0x3db, 0xffff0000}, {{}, 0x0, 0x7ff, 0x6}], 0x78) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x9c0000, 0x4, 0x80, [], &(0x7f0000000040)={0x980913, 0x3, [], @value=0x621}}) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r5, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xffffffffffffff39) setresgid(r7, 0x0, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setresgid(r9, 0x0, 0x0) getgroups(0x3, &(0x7f0000000180)=[r5, r7, r9]) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:31:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket(0x10ff7b48aea6ff0b, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ppoll(&(0x7f0000000200)=[{r1, 0x42}, {r1, 0x548a}, {}, {r0, 0x82e0}, {r2, 0x41}, {0xffffffffffffffff, 0x400}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x9}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0xff0a) mknod(&(0x7f00000000c0)='./file0\x00', 0x800, 0x6c8) socketpair(0x0, 0x5, 0xf7, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000380)={r4, 0x78, "9f238418fc9097ffd70fb0987d9f8cc99436525578f7dccd99aa13ee697679df8c82e334406a2afcfbae44de3d08c3441991a5a4bc450cd9158343e2af54022ab97444b9312ddb8c32bed63a85a8bd78cde3e7ee76351a953719bd77baf999243b4637e1567a518db573e6e86614f2cada4fd48be070f28f"}, &(0x7f0000000400)=0x80) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x10, 0x3, 0x0) r8 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_mr_cache\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000440)='\x00', &(0x7f00000004c0)='./file0\x00', r9) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000080)) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) flistxattr(r10, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x6) r11 = dup2(r0, r3) dup3(r11, r1, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$TIOCMSET(r14, 0x5418, &(0x7f0000000540)=0x9) [ 432.450768][T16688] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 08:31:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={0x34, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, '\np6_vti0\x00'}}}}}, 0x2b7}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x320f082}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000240), 0x2047df655eaa8e36) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000000)) [ 432.751693][T16710] Enabling of bearer rejected, failed to enable media 08:31:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2801, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@int=0xfffffffc, 0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) 08:31:21 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x800017, 0x30051, r3, 0x0) read(r0, &(0x7f0000000000)=""/17, 0xfffffcd6) [ 433.399648][T16710] Enabling of bearer rejected, failed to enable media 08:31:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x1}}, 0x20) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) [ 434.095907][T16723] x86/PAT: syz-executor.0:16723 map pfn RAM range req write-combining for [mem 0x1d8c40000-0x1d8c40fff], got write-back 08:31:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8001, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102000002) [ 434.226392][T16723] x86/PAT: syz-executor.0:16723 map pfn RAM range req write-combining for [mem 0x1d8d90000-0x1d8d90fff], got write-back 08:31:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r12, 0x8}}, 0x18) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r13, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r15 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r14, r15, 0x0) ioctl$EVIOCGSW(r15, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:22 executing program 4: r0 = socket(0x11, 0x57b96937ce479d07, 0x0) write(r0, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000140)={r1, r2}) r3 = syz_open_dev$evdev(&(0x7f0000000040)='\xce\x88+\x88\xb2\xce\x12z\xf3\xff.event#\x00', 0x0, 0x303000) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=""/22, 0x16, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r8, 0x4) dup3(r3, r4, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000080)=""/187) 08:31:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000240)) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) 08:31:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x1}}, 0x20) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x10000) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") dup3(r0, r2, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:23 executing program 5: syz_usb_connect(0x1, 0x2d, &(0x7f0000003b40)={{0x12, 0x1, 0x0, 0x49, 0xdb, 0x2e, 0x8, 0xc45, 0x1010, 0x6d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x1, 0x62, 0xf0, 0x4, 0x0, [], [{{0x9, 0x5, 0x85}}]}}]}}]}}, 0x0) 08:31:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2, 0x20400) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0x3f8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@local, @broadcast, r2}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000240)={r10, @in6={{0xa, 0x4e22, 0x2b89, @ipv4={[], [], @loopback}, 0xb3}}, 0x9, 0xffffffff, 0x85, 0x6, 0xfff}, &(0x7f0000000300)=0x98) r11 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$RTC_ALM_SET(r11, 0x40247007, &(0x7f00000000c0)={0x1c, 0x6, 0xb, 0x6, 0x9, 0x5, 0x3, 0x15a, 0x1}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r0, r3, 0x0, 0x102000002) 08:31:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x1}}, 0x20) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000ca996e13e096b39dc65000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000d0000000000"], 0x3c}}, 0x0) 08:31:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r2, r3/1000+30000}, 0x2, 0x3ff, 0x1}, {{0x0, 0x2710}, 0x1c, 0xbba, 0x4}], 0x30) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, 0x19, 0x2000000000000301, 0x0, 0x0, {0x1}, [@typed={0x14, 0x6, @ipv6=@empty}]}, 0x28}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r3, 0xdd42ddecb798d42f}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x90e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) [ 435.343804][ T12] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 435.417266][T16783] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 08:31:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xe, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/120, 0x78}], 0x105a, &(0x7f00000007c0)=""/157, 0x9d}, 0x83) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) [ 435.482406][T16783] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 08:31:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0x1000000000010007, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x9, 0x0, 0xb4, 0x40, 0x0, 0x80000000, 0x4000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x3, @perf_config_ext={0x9}, 0x20850, 0x4, 0x61, 0x5, 0x7, 0x4, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r4 = socket(0x10, 0x28e6530969093bec, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 08:31:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:23 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x1c240) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) fcntl$getown(r3, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmsg$nl_route(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18030000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getrule={0x20, 0x22, 0x200, 0x70bd2a, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x20, 0x1, 0x0, 0x0, 0x6, 0x10030}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x30040080) r7 = fcntl$dupfd(r5, 0x0, r4) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x9, @sdr={0x50313134, 0x9}}) [ 435.722402][ T12] usb 6-1: config 0 has an invalid interface number: 203 but max is 0 [ 435.730770][ T12] usb 6-1: config 0 has no interface number 0 [ 435.737081][ T12] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 435.746554][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 08:31:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x346, 0x40000, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) [ 435.870556][ T12] usb 6-1: config 0 descriptor?? 08:31:24 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/103) r1 = socket(0x10, 0x80000, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket(0x10, 0x1, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xb) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r10 = socket(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0xc) write(r11, &(0x7f0000000200)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x566f88ec0868fa4d) r12 = syz_usb_connect(0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESDEC=r4], @ANYRESHEX=r5, @ANYRESHEX=r8, @ANYRESHEX=r0], @ANYRES16=r9, @ANYRES32=r10], 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_QUERYSTD(r13, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r13, 0x40085618, &(0x7f0000000300)=r14) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=r14) [ 435.936067][ T12] yurex 6-1:0.203: Could not find endpoints [ 436.012854][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 436.019125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 436.025631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 436.031877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 436.135620][ T12] usb 6-1: USB disconnect, device number 16 [ 436.262861][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 436.269322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 436.912161][ T17] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 437.272356][ T17] usb 6-1: config 0 has an invalid interface number: 203 but max is 0 [ 437.280608][ T17] usb 6-1: config 0 has no interface number 0 [ 437.286902][ T17] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 437.296032][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.305605][ T17] usb 6-1: config 0 descriptor?? [ 437.345685][ T17] yurex 6-1:0.203: Could not find endpoints [ 437.544171][ T17] usb 6-1: USB disconnect, device number 17 08:31:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0xffffffffffffffea) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0xa67e568c944c9c91) r2 = socket(0x493d03e054116a10, 0x6, 0x4) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'nr0\x00'}, 0x18) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) rt_tgsigqueueinfo(r8, r7, 0x16, &(0x7f0000000200)) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r7, 0x0, 0x0) r9 = syz_open_procfs(r7, &(0x7f00000000c0)='sessionid\x00') ioctl$UI_SET_RELBIT(r9, 0x40045566, 0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001980)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[@ANYPTR, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRESDEC=r12, @ANYRES32, @ANYBLOB="14f67767edcb52335bc8034c2d753ba00e07e60f6fc23c799c9ade62dd431f9e9e21dd86e9c9003d52574a6ef602fc37ce4e8eb8c6090a0e409b06f5928241f17fb6e56b52e6211838a36ed8061f8fa16226b1cd1629b2fad5866abf54188e826129626927b9f1eade7bcf096e8a824249284c2f550ed2696c06dbb4de1baf23d821ee110d627c3ee473bdae13099d35c63482785d8dd82d058f49d10a63700df9bc1f530c074273506b0965dcbc967a169f4bf5d5bec7acd0e70994deb13e812f73f49879d6a7ff8e428e08c3c156cf5007b957e26e1838395ce1cf2f12e5124a4132a375"], @ANYRES32=r12, @ANYPTR, @ANYRESHEX=r13, @ANYRES16=r14, @ANYPTR], 0x6}}, 0x800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x39, 0x0}, @mcast2, @empty, 0x0, 0x100, 0x8, 0x400, 0x9, 0x19e5032a675e98b0, r6}) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r16 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r16, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="ed4e90c20c6773d6b2d05c9fd281e0c40a0610c8363c4bfd7ac3c1233590144a0a5d0db0e4db77e1141f8718dbeffa30d31fceef40f68480bab33f8ca66346cd57f07c9f950a7c719cccb851252ddfb6ec4c140cc324df9609fcaf28d62adc551c0ef23552895bd5f77a2cacd71d45a62a9a90e3ee4bba42ba6e28ca55b7d9c9e3415aad174c869311969217874a50f3d73baf9f4bfe8ecee15f27220a4035389d10fe8ce96cc9b3d6d2d11a063a6e4b89dc6c7435d94b9cf2b7", 0xba, 0x40, &(0x7f0000000340)={0x77359400}) 08:31:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="8d00000000000000280012000c00010076657468000000e1170002de1300010028b60000810f52703cfb9c5a4b9c48efd7621133142ef5decdc0d5054e2ba77fc3c4c9be62bc55925b39cb4a0167a7f6c13754a58c9331dd80bfad8c3f0691932809f5d6991a96925e0a839f64d7e9f178c3ead9acdbefd9529cb9de6a994ebc6aa4f5164d8bd00bb4255dc9cee12c9b3164339713146fc88acb35d1180b36f2d14b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7400000007000000000000000000eb0d00000000", @ANYRES32=0x0, @ANYBLOB="f7d50000ffffffff00000000050001007166710048000200000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000400"/92], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x2}, [@map={0x18, 0x8, 0x1, 0x0, r3}, @generic={0x0, 0x0, 0x3, 0x7}, @exit, @alu={0x0, 0x1, 0xd, 0xa, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x1, 0x5, 0x5, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0xfffffbff, 0x0, 0x0, 0x73c06f04860ef7db, 0x0, [], r7, 0x13, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xc, 0x1f, 0x9}, 0x10}, 0x70) r8 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000002c0)=""/212) dup3(r0, r8, 0x0) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000080)=""/187) 08:31:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$tipc(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x800) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000200)) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r4, 0x0, 0x0) rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000200)) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r3, 0x0, 0x0) getpriority(0x0, r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) getsockopt$inet6_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000340)=""/43, &(0x7f0000000380)=0x2b) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003e00040027bd7000fcdbf2250a000000"], 0x14}}, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x80) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, &(0x7f0000000280)={0x0, @bt={0xa, 0x7, 0x0, 0x2, 0x52ed, 0xfffffffe, 0x80000000, 0x40002, 0x252dc30c, 0x1, 0x7, 0x2edf, 0x4, 0xffffff14, 0x4, 0x34}}) 08:31:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000400)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r1, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/181, 0xb5}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/3, 0x3}], 0x8, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x503100, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001800000329bd7000fedbdf251d01010018000200020000a008010000af9552e9b449911f00000000000000ac33f907000000180003000000002008000000cbcc4dbed754b062010000000000000000000000000000000000136e883cb5e30f3ae4c5e26fb8700999c2b7a6697e2ffaeb3510060598aa2f8017ff168f5b2bfb676978e93635b6cbec503c874a89054b0f788e756d9f7f9db08b01f2cca5823fa7d3ff9600e20db59871a9501ad0687fd8e558819223682882feb372a2d2f36a7b0eef5e004dccab0627bc390e5efa6b87bc"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 08:31:26 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/103) r1 = socket(0x10, 0x80000, 0x0) write(r1, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r3 = socket(0x10, 0x1, 0x0) write(r3, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xb) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) r10 = socket(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0xc) write(r11, &(0x7f0000000200)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x566f88ec0868fa4d) r12 = syz_usb_connect(0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESDEC=r4], @ANYRESHEX=r5, @ANYRESHEX=r8, @ANYRESHEX=r0], @ANYRES16=r9, @ANYRES32=r10], 0x0) syz_usb_control_io(r12, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_QUERYSTD(r13, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r13, 0x40085618, &(0x7f0000000300)=r14) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=r14) [ 438.164239][T16834] IPVS: Unknown mcast interface: nr0 08:31:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000040)="027000") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000000040)="290000001400090000000000000060eb0100100006a40eff00000000000019382ca45324dda97ed1b7", 0x68) 08:31:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x80) ioprio_set$uid(0x3, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x4000000e, &(0x7f0000000180)) fstat(r1, &(0x7f0000000240)) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x10200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000200)) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000100)="3040504b4838afc6daf20cd2164423b67f7fc433ac7883ae3d0a60391df5728a36f5002578de0e35bfdadb4cacdc30d16f68134b8bcf6f0152bcebdeee129e543de1edbd516147b6384ef6f2415dc42281e4c6655aa09a703b4c906b768126c29b431f926be407f60daeb0f2f79c4e2da600fd6969c4f0826ce66d2c3dfca9df7ef63c89c6a915cccf71abb4e0a35ae02f0a5d9c17db431afb823deec485224adf") ptrace$cont(0x20, r4, 0x0, 0x0) process_vm_readv(r4, &(0x7f00000013c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/177, 0xb1}], 0x2, &(0x7f0000001700)=[{&(0x7f0000001400)=""/250, 0xfa}, {&(0x7f0000001500)=""/203, 0xcb}, {&(0x7f0000001600)=""/186, 0xba}, {&(0x7f00000016c0)=""/3, 0x3}], 0x4, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r3, r7}) [ 438.332613][T16842] IPVS: Unknown mcast interface: nr0 08:31:26 executing program 0: getegid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x10, 0xb}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x6}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xd02, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x7, 0x80000000}) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x4000803) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40046103, 0x0) 08:31:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f00000002c0)={0x4, r2, 0x1}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) 08:31:26 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) move_mount(r4, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) dup3(r0, r1, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) 08:31:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$P9_RWALK(r1, &(0x7f0000000040)={0x30, 0x6f, 0x1, {0x3, [{0x22, 0x1, 0x6}, {0x0, 0x3, 0x4}, {0x9a, 0x1, 0x4}]}}, 0x30) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000002) [ 438.568876][T16855] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 438.577785][T16855] sch_fq: defrate 0 ignored. 08:31:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000080)) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 438.695544][T16862] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 438.704696][T16862] sch_fq: defrate 0 ignored. 08:31:26 executing program 0: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80, 0x301000) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x58, 0x1, 0xff, "e3c997e4aabce26e891f583d0bdaabae", "85c035b750b905368d2f86f2fb680f33208e892ee3d647f7213e3cbe4df5293dda4ad54edf9b590037356bc1f3bb86f192014d9a441a4fd6c0c350a06f69e1e1622a54"}, 0x58, 0x3) sendto$inet6(r2, &(0x7f0000000080)="dd", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0xfef3, 0x0, 0x0, 0x0, 0xfffffffffffffdcc, 0xc4653600}}], 0x400000000000490, 0x6, 0x0) 08:31:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x28000003, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)="bc", 0x1, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="a50eeedf64b6d0e76c05fca1d44a222440bd94bd10bf2ba0b7ca4c3d471ae20d9914af9da63a2f2076fac015ea0cf0b752619cc2d4d5595a8f00"/71], 0x1}}, 0x48000) close(r1) 08:31:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2}], 0x1, 0x1, &(0x7f00000002c0)) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001f80)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x2}}, 0x7f, 0x8}, &(0x7f0000002040)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000002080)={r9, @in6={{0xa, 0x4e22, 0xffd, @mcast1, 0x3}}, [0xffffffff9db6d1e0, 0x114a, 0x200, 0x3, 0x615, 0x9e61, 0x80000001, 0xff, 0x9, 0x1ff, 0x2, 0x91a7, 0x6, 0xc8d, 0x1]}, &(0x7f0000002180)=0x100) sendmsg$inet(r6, &(0x7f0000001f40)={&(0x7f0000001640)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001680)="09a952d3907ea677436e61b73c079a1a6576a207821cd6117cb67ac1fc43eb5d66180f403ad01f0825b610704d2b3d83591b24b0fb90d057f431761475f4b4ea9b42f4d506d6a5f9df8a73332f4daff63fc9e0019a5bab784974d84ea6f939bf3803ce4c5bcdbd89a6054936bf718a1be1421f7950c4b6c8308578", 0x7b}, {&(0x7f0000001700)="7106d086709770c3109aec93ac11f05c4d42d8bed106e3d425cd4872c955b1ff19211cecc7df4cb17725c41a0618226b63756b88a2c52665265147228f3a509bfe9827396b2e086b8c6d4bea38756d690f65815163e4fca0c66eb1f41db9032c2030d11e7ec7a78cf9b883ac30f63dcbaa21c389409e70f505fd8aa6309ce89811359187729426945e2435ff9b99fbef7f34c3090058606938d85a5d55b0f9cf1e70420dc46bc8525df57875463521c9d9ab59cdacdf8d06b1d6489d8187c1f71091dcc07f418761c10978334d", 0xcd}, {&(0x7f0000001800)="a3c46ef7612b19b08d7cb18b740f0ce28bcdc9f362ba2c685224ca3213fbfb8d2d5e4842257fd66dbbc3627048ad4749e35ce0965c23e3bfdc2f3d18595c67eaab9de6281adfe7fa18903c821f042ca6f9420d0039a6a3bfbc614552fbde74e1bb38883042e10112023a46da235b3e44c253aa27cac05bfc3572118e18a23565a75d9bdc1abd06ef27810e7bf725b0b336bc6db07a012e3b037e43a956a3b85671610251d42d14d9d93501b2ac252ec95dc413ee8f3c61ac3dac4c66882ffb529f0d5d0fc3e0cea70e4155", 0xcb}, {&(0x7f0000001900)="7d55e7d36da10e03b57e253b2350b52fe931cb6e08af29dab2e2adeecd", 0x1d}, {&(0x7f0000001940)="8ef0e321c7755fbb5bf2d3057d09fdb721ef64e64136d5b94c27d1f204d32313d1d847ac6dc1caf2aac0", 0x2a}, {&(0x7f0000001980)="1343b116a7fcf1446cfae5d7037acfdb45f40f3fe6ea947758826050f675e07973e195d984cc3d78044758b4b416d060b42ccf501cd447e0dbfe21b58df4f71ab0b54e52db9d380bed02d3024e3806d51ea1a1d8aea1f43b577c9daebf9ca93f8f11e3ccc860a495caa01a8411c466f889e7fd70a76b78e40c738b80178a1414ba8de882fdf60e7a3fb65ed654084bf10cff07a2d2778d4ec93120df8bff9e5008cacf90913ec94cb6b4b6a188fe84cedba0d9cbfaeac646c93ecb4b5a155a2c8e7d3d868dba6825d0850ba37cedd6304009b95b09629c8d8676d066ab9b309afdc880f53911a7ab0713d0", 0xeb}, {&(0x7f0000001a80)="5dabaea6e5503225f66db3cbfc4daa4b06f29f6c1e03500c0ab66e192b5be298822f40c33d8135173efe08d8c33835f8f344217b15d9189243622437106601ccbd7efbfba28de915a8fdf746ceba75bd8f04ae26529af3e0423e420618d1430aa6838fbfc230dea8662c6ea82e3c54730338e8199c2e050ce93761d7530b6a82ff1a873d582cb025403af2ee84da6141027e51e64fe71b4451a0ffeb5b8599a7c79633bfb98e7c40030fb3e55a1e93b54e9eecea74e95e0a00be90ab3333e1c545797463091453e4e8f016760fb3d7fa1012e77ed63e735785a3608744bb73dc23d624b32ef1bd4928199fd2b446a7fa", 0xf0}, {&(0x7f0000001b80)="e4c210cc6b64ee61b48aaa40e19ce34723f64953fd24963a44747cee0c3cc434dea138ef3f8305309399a35ceca00fc3bdea73ea2479acc471cfaa811ebcd2e570ad6e4da41fed27e38aa5e523c5c4874c0906bd395ab8c2e0920339064ac67bb21c92f1cf56dfd3b092f58b68c26227c2f72be1a04e040934b0d9fa14f5b9c741d6692ccfed", 0x86}, {&(0x7f0000001c40)="8031b7234e482df85883199a8441bac12749804bfc72fb1d16dcf8ee9d44814aa238f032a1b6aa20366cbc63252c9f20a1e97a91c1774c8212942cb54bf11187e7a856998a6c3f8dc2228a5345573b2e59f3d08b", 0x54}], 0x9, &(0x7f0000001d80)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x7, 0x3d, [@local]}, @generic={0x1f4b8da9babe0815, 0xc, "ec075b4688f1de630c36"}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x11b, 0x8, "88881c4ada4a"}, @lsrr={0x83, 0x17, 0x7, [@rand_addr=0x80, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @broadcast]}, @rr={0x7, 0xf, 0x4, [@broadcast, @local, @loopback]}, @ssrr={0x89, 0x17, 0x7, [@remote, @broadcast, @loopback, @local, @local]}, @noop, @end]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x7f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @local, @loopback, @empty, @broadcast, @multicast2]}, @rr={0x7, 0x2b, 0x7b, [@remote, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x6]}, @ssrr={0x89, 0x1f, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @multicast2]}, @generic={0x1, 0x7, "c33c1b59d2"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x54, 0x0, 0x7, {[@rr={0x7, 0x17, 0x8, [@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @multicast2, @local, @local]}, @end, @noop, @rr={0x7, 0x2b, 0x8, [@loopback, @empty, @multicast1, @rand_addr=0xb202, @empty, @rand_addr=0x1000, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @rand_addr=0x8, @multicast1]}]}}}], 0x1a0}, 0x5000) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r10, 0x0, 0x0, 0x1}}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$TIOCGPKT(r13, 0x80045438, &(0x7f0000001600)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f00000015c0)={0x5, 0x10, 0xfa00, {&(0x7f00000013c0), r10}}, 0x18) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000340)) socket$caif_seqpacket(0x25, 0x5, 0x2) 08:31:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x300]}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff80, 0xa353}}}, 0xb8}}, 0x4000804) 08:31:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r11, 0x8}}, 0x18) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/187) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000005c0)="1c0000005e001f0014584707f9f4ffff000500000400000049000000", 0x1c) ioctl$sock_SIOCSIFBR(r12, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000300)}) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r14 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r13, r14, 0x0) ioctl$EVIOCGSW(r14, 0x8040451b, &(0x7f0000000000)=""/3) [ 438.959079][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 08:31:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/252) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000080)=""/187) 08:31:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00\f\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="4002df5d000000001000005b08000100753353a601c8b98d3d140d4bae512be5"], 0x38}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") init_module(&(0x7f0000000080)='batadv0\x00\f\x00', 0xa, &(0x7f0000000100)='\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000040)={{0x3, 0x0, @identifier="d3caac2547fddf96685d849cd2267aa1"}}) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 08:31:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x400000000008000, 0xff0d) shutdown(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x401, 0x5, [0x1, 0x401, 0x9, 0xdad, 0xf03a]}, &(0x7f0000000100)=0x12) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x40000000}) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@x25, 0x11e, 0x0, 0x0, 0x0, 0xfffffd43}}], 0x6a, 0x0, 0x0) [ 439.289880][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 439.299447][T16903] ===================================================== [ 439.306415][T16903] BUG: KMSAN: uninit-value in vsnprintf+0x218f/0x3210 [ 439.313193][T16903] CPU: 0 PID: 16903 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 439.321090][T16903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.331139][T16903] Call Trace: [ 439.334427][T16903] dump_stack+0x191/0x1f0 [ 439.338757][T16903] kmsan_report+0x13a/0x2b0 [ 439.343263][T16903] __msan_warning+0x73/0xe0 [ 439.347758][T16903] string+0x4be/0x600 [ 439.351824][T16903] vsnprintf+0x218f/0x3210 [ 439.356355][T16903] __request_module+0x2b1/0x11c0 [ 439.361321][T16903] tcf_proto_lookup_ops+0x3e7/0x700 [ 439.366513][T16903] tc_new_tfilter+0xfe0/0x4ce0 [ 439.371278][T16903] ? kmsan_internal_set_origin+0x6a/0xb0 [ 439.376920][T16903] ? refcount_dec_and_test_checked+0x14c/0x210 [ 439.383069][T16903] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 439.389168][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.395047][T16903] ? tcf_block_offload_unbind+0xa50/0xa50 [ 439.400754][T16903] ? tcf_block_offload_unbind+0xa50/0xa50 [ 439.406605][T16903] rtnetlink_rcv_msg+0xcb6/0x1580 [ 439.411644][T16903] ? local_bh_enable+0x36/0x40 [ 439.416415][T16903] ? __dev_queue_xmit+0x304d/0x4270 [ 439.421620][T16903] ? kmsan_internal_set_origin+0x6a/0xb0 [ 439.427246][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.433133][T16903] netlink_rcv_skb+0x431/0x620 [ 439.437906][T16903] ? rtnetlink_bind+0x120/0x120 [ 439.442926][T16903] rtnetlink_rcv+0x50/0x60 [ 439.447334][T16903] netlink_unicast+0xf6c/0x1050 [ 439.452197][T16903] netlink_sendmsg+0x110f/0x1330 [ 439.457169][T16903] ? netlink_getsockopt+0x1430/0x1430 [ 439.462548][T16903] ___sys_sendmsg+0x14ff/0x1590 [ 439.467409][T16903] ? kmsan_internal_set_origin+0x6a/0xb0 [ 439.473046][T16903] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 439.479206][T16903] ? __fget_light+0x6b1/0x710 [ 439.483891][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.489777][T16903] __sys_sendmmsg+0x53a/0xae0 [ 439.494459][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.500342][T16903] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 439.506395][T16903] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 439.512109][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.517991][T16903] __se_sys_sendmmsg+0xbd/0xe0 [ 439.522748][T16903] __x64_sys_sendmmsg+0x56/0x70 [ 439.527589][T16903] do_syscall_64+0xbc/0xf0 [ 439.532007][T16903] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 439.537888][T16903] RIP: 0033:0x459a29 [ 439.541859][T16903] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.561449][T16903] RSP: 002b:00007feeaa833c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.569860][T16903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 439.577816][T16903] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000005 [ 439.585773][T16903] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.593735][T16903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feeaa8346d4 [ 439.601699][T16903] R13: 00000000004c722e R14: 00000000004dca80 R15: 00000000ffffffff [ 439.609674][T16903] [ 439.611991][T16903] Uninit was created at: [ 439.616234][T16903] kmsan_internal_poison_shadow+0x53/0x100 [ 439.622026][T16903] kmsan_slab_alloc+0xaa/0x120 [ 439.626782][T16903] __kmalloc_node_track_caller+0xb55/0x1320 [ 439.632661][T16903] __alloc_skb+0x306/0xa10 [ 439.637064][T16903] netlink_sendmsg+0x783/0x1330 [ 439.641902][T16903] ___sys_sendmsg+0x14ff/0x1590 [ 439.646735][T16903] __sys_sendmmsg+0x53a/0xae0 [ 439.651393][T16903] __se_sys_sendmmsg+0xbd/0xe0 [ 439.656141][T16903] __x64_sys_sendmmsg+0x56/0x70 [ 439.660976][T16903] do_syscall_64+0xbc/0xf0 [ 439.665379][T16903] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 439.671249][T16903] ===================================================== [ 439.678160][T16903] Disabling lock debugging due to kernel taint [ 439.684294][T16903] Kernel panic - not syncing: panic_on_warn set ... [ 439.690875][T16903] CPU: 0 PID: 16903 Comm: syz-executor.5 Tainted: G B 5.3.0-rc7+ #0 [ 439.700132][T16903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.710169][T16903] Call Trace: [ 439.713539][T16903] dump_stack+0x191/0x1f0 [ 439.717931][T16903] panic+0x3c9/0xc1e [ 439.721835][T16903] kmsan_report+0x2a2/0x2b0 [ 439.726329][T16903] __msan_warning+0x73/0xe0 [ 439.730832][T16903] string+0x4be/0x600 [ 439.734811][T16903] vsnprintf+0x218f/0x3210 [ 439.739238][T16903] __request_module+0x2b1/0x11c0 [ 439.744194][T16903] tcf_proto_lookup_ops+0x3e7/0x700 [ 439.749386][T16903] tc_new_tfilter+0xfe0/0x4ce0 [ 439.754141][T16903] ? kmsan_internal_set_origin+0x6a/0xb0 [ 439.759772][T16903] ? refcount_dec_and_test_checked+0x14c/0x210 [ 439.765928][T16903] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 439.772007][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.777893][T16903] ? tcf_block_offload_unbind+0xa50/0xa50 [ 439.783596][T16903] ? tcf_block_offload_unbind+0xa50/0xa50 [ 439.789315][T16903] rtnetlink_rcv_msg+0xcb6/0x1580 [ 439.794342][T16903] ? local_bh_enable+0x36/0x40 [ 439.799093][T16903] ? __dev_queue_xmit+0x304d/0x4270 [ 439.804293][T16903] ? kmsan_internal_set_origin+0x6a/0xb0 [ 439.809918][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.815811][T16903] netlink_rcv_skb+0x431/0x620 [ 439.820562][T16903] ? rtnetlink_bind+0x120/0x120 [ 439.825411][T16903] rtnetlink_rcv+0x50/0x60 [ 439.829816][T16903] netlink_unicast+0xf6c/0x1050 [ 439.834671][T16903] netlink_sendmsg+0x110f/0x1330 [ 439.839614][T16903] ? netlink_getsockopt+0x1430/0x1430 [ 439.844970][T16903] ___sys_sendmsg+0x14ff/0x1590 [ 439.849818][T16903] ? kmsan_internal_set_origin+0x6a/0xb0 [ 439.855449][T16903] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 439.861508][T16903] ? __fget_light+0x6b1/0x710 [ 439.866182][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.872080][T16903] __sys_sendmmsg+0x53a/0xae0 [ 439.876773][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.882839][T16903] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 439.888892][T16903] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 439.894597][T16903] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 439.900482][T16903] __se_sys_sendmmsg+0xbd/0xe0 [ 439.905238][T16903] __x64_sys_sendmmsg+0x56/0x70 [ 439.910098][T16903] do_syscall_64+0xbc/0xf0 [ 439.914511][T16903] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 439.920385][T16903] RIP: 0033:0x459a29 [ 439.924278][T16903] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.944223][T16903] RSP: 002b:00007feeaa833c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.952650][T16903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 439.960622][T16903] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000005 [ 439.968581][T16903] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.976543][T16903] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feeaa8346d4 [ 439.984501][T16903] R13: 00000000004c722e R14: 00000000004dca80 R15: 00000000ffffffff [ 439.993885][T16903] Kernel Offset: disabled [ 439.998212][T16903] Rebooting in 86400 seconds..