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", 0xffffff9c)

16:20:48 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)="aec56bbeb4ced9c799a2532075c7ff1f1895eb39b735445ab9b87f0e892a1785f859268f5bb6027d71293db4419640564cce5ad321e21d2ba0ef09d9d78549f2a3624767d0ca9e996c4162462cbf7dd170944f98e0a198a3778467d7dece49eee6548fc5dba8aa42f9be7eb68a0e0aad2e605010812f2312ac2c781b5ca70f3d0554ec5ff64eb0047d1ad895db0256770d755e49a585e117a693eaa21d22327699faefc2a0c82a199f72007d5bd970546317dea6d2924abd2ce840998f91e9b2440c233a773a83d7a7d4544c51020c9ccbdc050776f665e19fe95cb9b2a76bc16a59fbd9a280ff6d3744aa6e2a5c753015fad0988c1ecdc4880a0ea8dbfea23cf50a2c37e1a0c9dbd7467108b223482e198c97d62927afd7495cfe3e069f0d3bef38c47060fa28a515b02aea4529f04208cadbd4384de603f37b272d0042f16200099e17eec5d7fa273cd92272521e569752fd4752f2933f500b4eca689c62b2ad4902d6e5f13c3beb825109f70829d40c746a843a161d0b63a265cdd1dfa4f25b70d5b6e7d84e5769a151e1a90c0888863fa3a178c91c91b4f39d7b7eaddef774a2d67e5a9643eb6e5d17ce92b6e259b4598980e47fbb3372faf146b8c311046750758a7153ba0b7dba89d37ddf1febfafcc5589229fe336a9ca4762c05a77c948363ed1503c3684cbff54f8d9be81e30c00d9bc9d5c86aa49fd8929c1a88692b25be0f6e70750d78472aa9ac8a728b62b7b81b02b4f34bcba84b0123ac305e79a87e52d9fe48b1cb3e4b3769758a7febbf5ee169407a34f327f8f10918fa5a057225120b1f726f42f671722cd57aa1badd11eefdf30051338ffeeaa60000cc1c0210b2162bb92de1a42cc49167bc7a489883b90c2a4bf5f46b90db330e8e212e3203c53a3c938e34a156a7631236f1c0b644f7980503ee46737a2967f2ffabebcea6736b176288d21739c93afb7e4f8bc33ab720f23aba70d534f69ddca4c8ad431e65298ec2b4f1f0b07c54c2713f64b861f7b995656637f5d6e67b8d1c2440e65cbba6422e7c4e42317f79837db5f1f3cc0872f71b69fb37621271c01281192082ad64f3ee67dda51d346b0c6eec8109cb90a2b82da2f6b9e0b93a963db69785f22f55858c9b1f1ff49c042f49fb3b7faff5483ee0e79a28f8fedfd536f4d8e799016168adb1799e96234e7f491054d60bb130d8e3fa7a519f4d71ce126fabe615f28ec7ced897a597b00dee2e1959b4d839dac5030389e0e232639ea3acb30c09e4b435d061a51e56d604245097ec0a063c12213f870a5ccf56e9547536fa5fcd32bc6f002b2b2095ed7c854996fde815f965fe57b39420e2a1669cad2c988d9a20a85c2e263cc1df2bfec6b0b13c18c7597b469a265757bd825cf8b5ccb03a6e49cf07eccf0789d77ff28316a364e487d585c3d4e36febbdaf2d587af157c771279fb5e389c61305f4c95419c6dba2a0662d1f276062ceebd5f77d11d53df7943de45cc4ab5c7f8d5e98598237b35cde845854b9f637c49521a2acacdd7f9e6cc5f80ca72da78f77869ac7f467b5e68362d62ad252515131323dd6e8743613e57a22a6e65c42a4fb4cd7e4597427640217a781129980e3a7bb5d3e4da8c1d806b2382276ce42d4184ca8ed1e8f6b11ee72242e69c4889e1060eeff7e560a121c115b8490827d7bcffb2c63f62f140b4dca26bdc133ba290a3ced7c5265980e9b2b241f2b3857c1e573092317f5c51c47a64bf4522291cd9d133a8de7dee340de02950ed5cec7adff219492ea7582f431074ed3f6324282b33e72f22f01710b57f3ece74ca6faa9b5f8aaaca705b4927f9219d970535efb09a2d06e1cc70af908c9f5efd41851134b409868bd758e9eee4dd24ac2fca0336608ecb57ec31e0f1885c786d1073868440fa41f619dd04ba7dfbd1375a3640aa2e946ac490d873794e755c592aff76e859d3facc3697e01a487334f48dc15235e35e2159af1fa1993589d331c32b87580abeba63a882771cd4ff1190a10f63ad3f722dee2f777041350dbd2dfe2621ec15fdf3810d32c15c34cea3f7f0ad41cc941ca3ed3a2162afedb92f49558d952d9182a1c96ac19714775f02723b5193af44812add0cb02ce00fbdc1b55f841e7a3a1378a24d4e8ea7df123d595df2b9603e8760ac9e5d54f27ed774efe2153d86f2fc4bb882dea8604bcf1449ae1c7dd4b1b9558d840934eb327ef4800ad153e270869811f59dfd25383108f152b700e95a7384d356db0fce7be55be19ca8578b2598c0259e2a7a5e49d489b6940f3f51771671e10b86442724795a09d3cb66afe6b3d5f7324b0279ec1067c26f47ee3437c1a50820060123e88e4f7fba55ca281f78f654d4e4ed99eecac562953f64e9623579783b9269436c55b9846b2a06ec06dbf164597ddfa66e97aae2430349451ff35c7ad46e6128fe6f2d09bc1afcf68a02524b3fa061841a55da48e163c800d365677c558842023809866f6658a31879c36303d3bddf041252945dfde97514792a1b6e12fe605fbd876b357135bfa92304c6c39def0221a4eab3882b94a5d145dac1720203b85b228dc1d7df2a2ac51553fad4d9d5ddaf5fe1b426a917ab25161955060029abdd4e892e55eddd86f302a3a23c3b762e10436914bf15b4c39b6244bbb03caedfe99d185944264eaa8eec21d0f24c54be3d48c2105f4fc38bf0dcfd95a267e1eb8f193b0db957707ca23dce5d7c6109e4f6011d2a6f39cd8c2ab6ead0e296b5d675e65737d5e62bc3a5d3b42b8345304cd73f3d9d13babbc4257061a0823cdcf71e2bcaf0d5e1b9fb93190acf9312b478b9ac2363aadb1e40d054bb6c015ae149a70ded979d6478cbc2bf9dc9000edc95170149aa377ec9f5d29a97a1928b440f0401cf7092842fd59b027cab1890e44aa51e517f5be2c2f243b5c6e1f0f4f08effeac4341915c0c23763f7a42c33a9283fba250ffd3962c96f563030f78506b5ed5d11a713aab781d5489ecba2549ec17aff8bd27c58a74dc58a6340408980789cf7b85906c4434bc687adfd3e8ed51f2bb8b151f75094235c4831bf650b714fe0bc4d421b2093a60c87650f8b40650713b0123c60605869d725c291a45760d860db5cfeb7079148a1b377006f1d0114204a600ddbe5158d3abc5595371999576140894760ef115bbae94668d2dd3f56d32e939d502ddfee3364be02ef9923e86137eba31df0954660494b1030e6487b2861d3503cdcd9623df829060492681ff17cbade056185b60cbe8bfc0b105afa7dabbcb1b3a5cd64e58e6ee78f77020d49043b6b3b76dfb98c56180221a156749955b51d157cddc195acdb63f9a475bb504930946645dc8b3332b94404a5540ad83ff17fa4fd2fdc0aff540cee90b4ee8f025ac153a2184060ca4136de2f9ba22d77bb40749b6a2481a159100f42473031a98a9921218b6938a03306893ad9209fd27063eb22cbc8cc25ec7b1fb4ec4255acee782a4df75b6c7ad7fecd2a75811bc9f01c147bdb3caaf66f274d1decfaa148a3b4342a8fa4696c9d47e18bc7d6a02360d887246b1238b87ee8d0c4c8be601e3c4cf4c0aa822bf1b23a73e98e19e97e624aecdb7cbffd4b1a2da6f6ccbe517fa9b93658907f45e223bc4b44ef4f5f3f19de88c125bb266e5f1e28d8077916489c92a37d91607df05df20a43ffbba97c67e63649c7a00e47c2196d02eafd8286ed52819e48a0812365db62d6499cbca9e37803304bbf15cad44bcf58b4581c97a093f3c4d2bade77aa7cadc2eb59fcd081b6a416a45c0627bc422bdeae8b9cf1abc466355da18879457543b86a76ea66a977c293eafabf78d12a9b8ff0b67db179841ea2b4a1016ae18ecfae766731e17f5ac0c18bccd5cfcb18785da31288d412f6e067b791b448f3adb6223d08b352aaab14c84debfcab1bf25352dbb882fd757c092ada67a9adc80a3935dbdc7e824aacbd5d3a71a7ee836681d4b1eef5467d19528e142e73645b893aa81aed08c18d75ae5bd5db3b9b776ac5e4ac509fd8767abdaa2ce0946cd731fb682edaa7a9d5ecb0736bc4c53c033d9b3e2c60f3852f75d6cb8027f9595802ffa58e036f65d71a2f5af076a8ba397a7ddae63b097777f8d988e6486da1c6ef5c2a5331f3c9596439c139b8494d6f29f3afc0345e383bbd2d83d030b21e39edf3825347d1420ec1314406f34e63ed4f29c963cab02afb1fbd9f1f2e2d78bce5dfef9ac8f67f211e813e7ecf906567d02f848cf5698ca2d30ce911fc872706a94813ffc09a342497925a8c49331d68f2f00d626eb23debdbcca031868c2fb1a53d2c836b8b0351509ec4e3968d8618d7bf157821795cfa74eaa4a896fc7fed5080f765ddb8e56291952dbabf14e29ba89727a2cc35ac85b1903df04f47c8e358f69dbb4c73f0b0fdaf28cc55991355a7f6b4269ee8e3f6dabd5af587c677667727195815ef55d00c41537b7d731386fef9bc53ef83092f0d72cfca4658dc6674bf6d2a356a134600ba0f440ca6bccfffb763a3697a905bfcd1db21b7a8973f797de36b79b0b61e61f6e533de78743796e0de7fe5dece94806f89f48826b43f501563561074a392fe4ff95e34f901c48c4e8447a760970314e363f94d374ad205931ade89d5fb3356f9a135281443792277f69f9cb235f88adceffc14b28882bcbb6a844cc56ba5be6fb79ae0ff6d5a4d353de2f11d04977ff34365e5017f14e876258caa02f8b7cb4676617e66b79865ae2409eea1cbec42f95ccf7f08088051dac430661ed047aa89ee19ecea53cb46bbc2564e49e96cba18899065f3511d8eddc280a5113380a427e7dcad7659ede85be8f84d5c6c6f228a5571fee1deacc1a704a95ca1108ecd59589af5e1d0373c595bbdba1de09e03bad6ffd8797dfebb57e63e4b13507d1c703dafe6e3abd4daa79a545f0ed03bf53d771d2d27d077273c6ee1ef4ba5d8c3db5ff09d32502ebd2b0bae5f87fc9c7c872631bbd6bfe110b691b63b70ca0b4ce61d1c429aa674c5b5635f3cb211a850dac9e1f7365e216ca4cb3e70deb10739ced3e34a78afd7bc761f254477c07b635d7ee5b859ac532a2ccff6d9704e1318be6213065a694f347cf32af626b5dbb4a45862f8a56d50e079adf49422d6637e9d7596028c610b805f3d32f2940aac144abb64a61c9c0908633f3dd1419b4a0b8f0c202dec1c38cca445f40a021bb87b48c08ec92d53aa6eefb1b6a132befe0450451486d17d7733e959c0eef936c22f0b5997d2ced5392dda14a821baceee4d3c772c88fbcf25e56f8e75273f0a2b3a6765c5666e5a22fbe3ffa033a4dedc7d48b8f49040becf70e3804e74e87ab35b8395a64979a8d4ee1a55411872de0d468bdb22e878a6bfa8745a0b30cbccb6dd1807c4c4d9ca1fe2b910dd0ff2d0839f460e985a6b6de5124b24a10d3f734166b3c36c19feb7ffed2fcc3fa9e81abebb6cabb3deba1e3891be647767707362f67ca7bf4a413c7ee25f4b8cf0e16a0cc565e970874c1e9fd8d7193aa6da1b51306e999a588b1f1db6eae38a085e49c90bcbd5ac541376d94e3656305ae5d91b4d5ef4e121acf104aef220e00702c9e6fee1ba4ee580b5b95892f9a0687d1f01e7511fb41c9f61df520829bfefbf40d15c0d154682369a1be4e02052e21b278906c6cced2fea095df3b7f023966acfbe432234133bb04c427ed4dc3d0c90140166d2caa7d66eed7076859cecff8567481ca41e9b8819a0d53e49d80f5ef900e1b81d7ba39c666752179eb2a51e8148d93", 0xffffff9c)

16:20:48 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x21, 0xb, 0x0, "46b55b962ca56f5c673efa4aaf23a082005baf74fc6b450e1d08b3e073f5f462"})

16:20:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000580)="f948fac3e8138e6575ad4edf55ecc0fc2be24af7f0bbe4289ca12c041c5e5856280efc44d5bb9c5a41bacafaf22dd25d7d23f58bcab29ed095cbf2113045a5b08f42be8197d3c0670157f1a056eab215ec89e88d398a687986cbb714000001000000000054be58d73020f2f6af2b0f314f17ea", 0xffffffe4)

16:20:48 executing program 0:
unshare(0x20400)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000400)="f6", 0x1}], 0x1, 0x0)

16:20:48 executing program 1:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7f, 0xa4, 0xe, 0x20, 0x547, 0x7303, 0xb4bc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x4, 0xfa, 0xa9}}]}}]}}, 0x0)

[ 1675.455545][T11461] debugfs: Directory '11461-4' with parent 'kvm' already present!
16:20:48 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x21, 0xb, 0x0, "46b55b962ca56f5c673efa4aaf23a082005baf74fc6b450e1d08b3e073f5f462"})

16:20:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x17, 0x0, 0x0)

16:20:48 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x21, 0xb, 0x0, "46b55b962ca56f5c673efa4aaf23a082005baf74fc6b450e1d08b3e073f5f462"})

[ 1675.735148][T11637] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1675.746335][T11631] usb 2-1: new high-speed USB device number 120 using dummy_hcd
16:20:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000580)="f948fac3e8138e6575ad4edf55ecc0fc2be24af7f0bbe4289ca12c041c5e5856280efc44d5bb9c5a41bacafaf22dd25d7d23f58bcab29ed095cbf2113045a5b08f42be8197d3c0670157f1a056eab215ec89e88d398a687986cbb714000001000000000054be58d73020f2f6af2b0f314f17ea", 0xffffffe4)

16:20:48 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x21, 0xb, 0x0, "46b55b962ca56f5c673efa4aaf23a082005baf74fc6b450e1d08b3e073f5f462"})

[ 1675.775336][T11634] usb 5-1: new high-speed USB device number 45 using dummy_hcd
16:20:48 executing program 0:
r0 = socket(0x1e, 0x5, 0x0)
sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/43, 0x2b}}, {{0x0, 0x1de, &(0x7f00000037c0)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x11b, 0x0, 0xd6}}], 0x2, 0x3, 0x0)

[ 1675.983745][T11637] usb 4-1: Using ep0 maxpacket: 16
[ 1675.993158][T11631] usb 2-1: Using ep0 maxpacket: 32
[ 1676.023719][T11634] usb 5-1: Using ep0 maxpacket: 16
[ 1676.103488][T11637] usb 4-1: config index 0 descriptor too short (expected 58986, got 36)
[ 1676.112112][T11637] usb 4-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[ 1676.121236][T11637] usb 4-1: config 161 has 1 interface, different from the descriptor's value: 201
[ 1676.130670][T11637] usb 4-1: config 161 has no interface number 0
[ 1676.133645][T11631] usb 2-1: config 0 has an invalid interface number: 111 but max is 0
[ 1676.137155][T11637] usb 4-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[ 1676.145440][T11631] usb 2-1: config 0 has no interface number 0
[ 1676.155354][T11637] usb 4-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[ 1676.161436][T11631] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=b4.bc
[ 1676.171676][T11637] usb 4-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 1676.180765][T11631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.189882][T11637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.220055][T11631] usb 2-1: config 0 descriptor??
[ 1676.243315][T11634] usb 5-1: config index 0 descriptor too short (expected 58986, got 36)
[ 1676.251869][T11634] usb 5-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[ 1676.261011][T11634] usb 5-1: config 161 has 1 interface, different from the descriptor's value: 201
[ 1676.271077][T11634] usb 5-1: config 161 has no interface number 0
[ 1676.277673][T11634] usb 5-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[ 1676.279203][T11631] gspca_main: dtcs033-2.14.0 probing 0547:7303
[ 1676.287700][T11634] usb 5-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[ 1676.287813][T11634] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 1676.313634][T11634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.483596][T11631] usb 2-1: USB disconnect, device number 120
[ 1676.543073][T11637] usb 4-1: GET_CAPABILITIES returned ffffffc0
[ 1676.549346][T11637] usbtmc 4-1:161.8: can't read capabilities
[ 1676.583149][T11634] usb 5-1: GET_CAPABILITIES returned ffffffc0
[ 1676.589285][T11634] usbtmc 5-1:161.8: can't read capabilities
[ 1676.782856][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.792386][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.801210][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.810813][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.820341][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.829877][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.839380][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.848885][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.858395][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.867929][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.877527][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.887015][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.896532][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.906019][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.915513][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.923887][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1676.942073][T11473] usbtmc 4-1:161.8: Unable to send data, error -71
[ 1676.953788][T11634] usb 4-1: USB disconnect, device number 20
[ 1676.963847][T11480] usbtmc 4-1:161.8: Unable to send data, error -108
[ 1676.972295][T11637] usb 5-1: USB disconnect, device number 45
16:20:50 executing program 4:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)="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", 0xffffff9c)

16:20:50 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)="aec56bbeb4ced9c799a2532075c7ff1f1895eb39b735445ab9b87f0e892a1785f859268f5bb6027d71293db4419640564cce5ad321e21d2ba0ef09d9d78549f2a3624767d0ca9e996c4162462cbf7dd170944f98e0a198a3778467d7dece49eee6548fc5dba8aa42f9be7eb68a0e0aad2e605010812f2312ac2c781b5ca70f3d0554ec5ff64eb0047d1ad895db0256770d755e49a585e117a693eaa21d22327699faefc2a0c82a199f72007d5bd970546317dea6d2924abd2ce840998f91e9b2440c233a773a83d7a7d4544c51020c9ccbdc050776f665e19fe95cb9b2a76bc16a59fbd9a280ff6d3744aa6e2a5c753015fad0988c1ecdc4880a0ea8dbfea23cf50a2c37e1a0c9dbd7467108b223482e198c97d62927afd7495cfe3e069f0d3bef38c47060fa28a515b02aea4529f04208cadbd4384de603f37b272d0042f16200099e17eec5d7fa273cd92272521e569752fd4752f2933f500b4eca689c62b2ad4902d6e5f13c3beb825109f70829d40c746a843a161d0b63a265cdd1dfa4f25b70d5b6e7d84e5769a151e1a90c0888863fa3a178c91c91b4f39d7b7eaddef774a2d67e5a9643eb6e5d17ce92b6e259b4598980e47fbb3372faf146b8c311046750758a7153ba0b7dba89d37ddf1febfafcc5589229fe336a9ca4762c05a77c948363ed1503c3684cbff54f8d9be81e30c00d9bc9d5c86aa49fd8929c1a88692b25be0f6e70750d78472aa9ac8a728b62b7b81b02b4f34bcba84b0123ac305e79a87e52d9fe48b1cb3e4b3769758a7febbf5ee169407a34f327f8f10918fa5a057225120b1f726f42f671722cd57aa1badd11eefdf30051338ffeeaa60000cc1c0210b2162bb92de1a42cc49167bc7a489883b90c2a4bf5f46b90db330e8e212e3203c53a3c938e34a156a7631236f1c0b644f7980503ee46737a2967f2ffabebcea6736b176288d21739c93afb7e4f8bc33ab720f23aba70d534f69ddca4c8ad431e65298ec2b4f1f0b07c54c2713f64b861f7b995656637f5d6e67b8d1c2440e65cbba6422e7c4e42317f79837db5f1f3cc0872f71b69fb37621271c01281192082ad64f3ee67dda51d346b0c6eec8109cb90a2b82da2f6b9e0b93a963db69785f22f55858c9b1f1ff49c042f49fb3b7faff5483ee0e79a28f8fedfd536f4d8e799016168adb1799e96234e7f491054d60bb130d8e3fa7a519f4d71ce126fabe615f28ec7ced897a597b00dee2e1959b4d839dac5030389e0e232639ea3acb30c09e4b435d061a51e56d604245097ec0a063c12213f870a5ccf56e9547536fa5fcd32bc6f002b2b2095ed7c854996fde815f965fe57b39420e2a1669cad2c988d9a20a85c2e263cc1df2bfec6b0b13c18c7597b469a265757bd825cf8b5ccb03a6e49cf07eccf0789d77ff28316a364e487d585c3d4e36febbdaf2d587af157c771279fb5e389c61305f4c95419c6dba2a0662d1f276062ceebd5f77d11d53df7943de45cc4ab5c7f8d5e98598237b35cde845854b9f637c49521a2acacdd7f9e6cc5f80ca72da78f77869ac7f467b5e68362d62ad252515131323dd6e8743613e57a22a6e65c42a4fb4cd7e4597427640217a781129980e3a7bb5d3e4da8c1d806b2382276ce42d4184ca8ed1e8f6b11ee72242e69c4889e1060eeff7e560a121c115b8490827d7bcffb2c63f62f140b4dca26bdc133ba290a3ced7c5265980e9b2b241f2b3857c1e573092317f5c51c47a64bf4522291cd9d133a8de7dee340de02950ed5cec7adff219492ea7582f431074ed3f6324282b33e72f22f01710b57f3ece74ca6faa9b5f8aaaca705b4927f9219d970535efb09a2d06e1cc70af908c9f5efd41851134b409868bd758e9eee4dd24ac2fca0336608ecb57ec31e0f1885c786d1073868440fa41f619dd04ba7dfbd1375a3640aa2e946ac490d873794e755c592aff76e859d3facc3697e01a487334f48dc15235e35e2159af1fa1993589d331c32b87580abeba63a882771cd4ff1190a10f63ad3f722dee2f777041350dbd2dfe2621ec15fdf3810d32c15c34cea3f7f0ad41cc941ca3ed3a2162afedb92f49558d952d9182a1c96ac19714775f02723b5193af44812add0cb02ce00fbdc1b55f841e7a3a1378a24d4e8ea7df123d595df2b9603e8760ac9e5d54f27ed774efe2153d86f2fc4bb882dea8604bcf1449ae1c7dd4b1b9558d840934eb327ef4800ad153e270869811f59dfd25383108f152b700e95a7384d356db0fce7be55be19ca8578b2598c0259e2a7a5e49d489b6940f3f51771671e10b86442724795a09d3cb66afe6b3d5f7324b0279ec1067c26f47ee3437c1a50820060123e88e4f7fba55ca281f78f654d4e4ed99eecac562953f64e9623579783b9269436c55b9846b2a06ec06dbf164597ddfa66e97aae2430349451ff35c7ad46e6128fe6f2d09bc1afcf68a02524b3fa061841a55da48e163c800d365677c558842023809866f6658a31879c36303d3bddf041252945dfde97514792a1b6e12fe605fbd876b357135bfa92304c6c39def0221a4eab3882b94a5d145dac1720203b85b228dc1d7df2a2ac51553fad4d9d5ddaf5fe1b426a917ab25161955060029abdd4e892e55eddd86f302a3a23c3b762e10436914bf15b4c39b6244bbb03caedfe99d185944264eaa8eec21d0f24c54be3d48c2105f4fc38bf0dcfd95a267e1eb8f193b0db957707ca23dce5d7c6109e4f6011d2a6f39cd8c2ab6ead0e296b5d675e65737d5e62bc3a5d3b42b8345304cd73f3d9d13babbc4257061a0823cdcf71e2bcaf0d5e1b9fb93190acf9312b478b9ac2363aadb1e40d054bb6c015ae149a70ded979d6478cbc2bf9dc9000edc95170149aa377ec9f5d29a97a1928b440f0401cf7092842fd59b027cab1890e44aa51e517f5be2c2f243b5c6e1f0f4f08effeac4341915c0c23763f7a42c33a9283fba250ffd3962c96f563030f78506b5ed5d11a713aab781d5489ecba2549ec17aff8bd27c58a74dc58a6340408980789cf7b85906c4434bc687adfd3e8ed51f2bb8b151f75094235c4831bf650b714fe0bc4d421b2093a60c87650f8b40650713b0123c60605869d725c291a45760d860db5cfeb7079148a1b377006f1d0114204a600ddbe5158d3abc5595371999576140894760ef115bbae94668d2dd3f56d32e939d502ddfee3364be02ef9923e86137eba31df0954660494b1030e6487b2861d3503cdcd9623df829060492681ff17cbade056185b60cbe8bfc0b105afa7dabbcb1b3a5cd64e58e6ee78f77020d49043b6b3b76dfb98c56180221a156749955b51d157cddc195acdb63f9a475bb504930946645dc8b3332b94404a5540ad83ff17fa4fd2fdc0aff540cee90b4ee8f025ac153a2184060ca4136de2f9ba22d77bb40749b6a2481a159100f42473031a98a9921218b6938a03306893ad9209fd27063eb22cbc8cc25ec7b1fb4ec4255acee782a4df75b6c7ad7fecd2a75811bc9f01c147bdb3caaf66f274d1decfaa148a3b4342a8fa4696c9d47e18bc7d6a02360d887246b1238b87ee8d0c4c8be601e3c4cf4c0aa822bf1b23a73e98e19e97e624aecdb7cbffd4b1a2da6f6ccbe517fa9b93658907f45e223bc4b44ef4f5f3f19de88c125bb266e5f1e28d8077916489c92a37d91607df05df20a43ffbba97c67e63649c7a00e47c2196d02eafd8286ed52819e48a0812365db62d6499cbca9e37803304bbf15cad44bcf58b4581c97a093f3c4d2bade77aa7cadc2eb59fcd081b6a416a45c0627bc422bdeae8b9cf1abc466355da18879457543b86a76ea66a977c293eafabf78d12a9b8ff0b67db179841ea2b4a1016ae18ecfae766731e17f5ac0c18bccd5cfcb18785da31288d412f6e067b791b448f3adb6223d08b352aaab14c84debfcab1bf25352dbb882fd757c092ada67a9adc80a3935dbdc7e824aacbd5d3a71a7ee836681d4b1eef5467d19528e142e73645b893aa81aed08c18d75ae5bd5db3b9b776ac5e4ac509fd8767abdaa2ce0946cd731fb682edaa7a9d5ecb0736bc4c53c033d9b3e2c60f3852f75d6cb8027f9595802ffa58e036f65d71a2f5af076a8ba397a7ddae63b097777f8d988e6486da1c6ef5c2a5331f3c9596439c139b8494d6f29f3afc0345e383bbd2d83d030b21e39edf3825347d1420ec1314406f34e63ed4f29c963cab02afb1fbd9f1f2e2d78bce5dfef9ac8f67f211e813e7ecf906567d02f848cf5698ca2d30ce911fc872706a94813ffc09a342497925a8c49331d68f2f00d626eb23debdbcca031868c2fb1a53d2c836b8b0351509ec4e3968d8618d7bf157821795cfa74eaa4a896fc7fed5080f765ddb8e56291952dbabf14e29ba89727a2cc35ac85b1903df04f47c8e358f69dbb4c73f0b0fdaf28cc55991355a7f6b4269ee8e3f6dabd5af587c677667727195815ef55d00c41537b7d731386fef9bc53ef83092f0d72cfca4658dc6674bf6d2a356a134600ba0f440ca6bccfffb763a3697a905bfcd1db21b7a8973f797de36b79b0b61e61f6e533de78743796e0de7fe5dece94806f89f48826b43f501563561074a392fe4ff95e34f901c48c4e8447a760970314e363f94d374ad205931ade89d5fb3356f9a135281443792277f69f9cb235f88adceffc14b28882bcbb6a844cc56ba5be6fb79ae0ff6d5a4d353de2f11d04977ff34365e5017f14e876258caa02f8b7cb4676617e66b79865ae2409eea1cbec42f95ccf7f08088051dac430661ed047aa89ee19ecea53cb46bbc2564e49e96cba18899065f3511d8eddc280a5113380a427e7dcad7659ede85be8f84d5c6c6f228a5571fee1deacc1a704a95ca1108ecd59589af5e1d0373c595bbdba1de09e03bad6ffd8797dfebb57e63e4b13507d1c703dafe6e3abd4daa79a545f0ed03bf53d771d2d27d077273c6ee1ef4ba5d8c3db5ff09d32502ebd2b0bae5f87fc9c7c872631bbd6bfe110b691b63b70ca0b4ce61d1c429aa674c5b5635f3cb211a850dac9e1f7365e216ca4cb3e70deb10739ced3e34a78afd7bc761f254477c07b635d7ee5b859ac532a2ccff6d9704e1318be6213065a694f347cf32af626b5dbb4a45862f8a56d50e079adf49422d6637e9d7596028c610b805f3d32f2940aac144abb64a61c9c0908633f3dd1419b4a0b8f0c202dec1c38cca445f40a021bb87b48c08ec92d53aa6eefb1b6a132befe0450451486d17d7733e959c0eef936c22f0b5997d2ced5392dda14a821baceee4d3c772c88fbcf25e56f8e75273f0a2b3a6765c5666e5a22fbe3ffa033a4dedc7d48b8f49040becf70e3804e74e87ab35b8395a64979a8d4ee1a55411872de0d468bdb22e878a6bfa8745a0b30cbccb6dd1807c4c4d9ca1fe2b910dd0ff2d0839f460e985a6b6de5124b24a10d3f734166b3c36c19feb7ffed2fcc3fa9e81abebb6cabb3deba1e3891be647767707362f67ca7bf4a413c7ee25f4b8cf0e16a0cc565e970874c1e9fd8d7193aa6da1b51306e999a588b1f1db6eae38a085e49c90bcbd5ac541376d94e3656305ae5d91b4d5ef4e121acf104aef220e00702c9e6fee1ba4ee580b5b95892f9a0687d1f01e7511fb41c9f61df520829bfefbf40d15c0d154682369a1be4e02052e21b278906c6cced2fea095df3b7f023966acfbe432234133bb04c427ed4dc3d0c90140166d2caa7d66eed7076859cecff8567481ca41e9b8819a0d53e49d80f5ef900e1b81d7ba39c666752179eb2a51e8148d93", 0xffffff9c)

16:20:50 executing program 0:
r0 = socket(0x1e, 0x5, 0x0)
sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/43, 0x2b}}, {{0x0, 0x1de, &(0x7f00000037c0)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x11b, 0x0, 0xd6}}], 0x2, 0x3, 0x0)

16:20:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000580)="f948fac3e8138e6575ad4edf55ecc0fc2be24af7f0bbe4289ca12c041c5e5856280efc44d5bb9c5a41bacafaf22dd25d7d23f58bcab29ed095cbf2113045a5b08f42be8197d3c0670157f1a056eab215ec89e88d398a687986cbb714000001000000000054be58d73020f2f6af2b0f314f17ea", 0xffffffe4)

16:20:50 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.swap.max\x00\xb6\xb1\xb9\xf8\xa2\x01\x8c\x83\x9cq\x03 \x01*\a<\x91N\x1e\x91YV\xc2\xa2>\xcc\xef\x1c\xa5\xae\xa3#u\x17\xe1\xee\xa7\x808\xb4\xdaq#7\xee\x94\xd4[jN\xd1\xa9k\xae\xac\xd3\x9f\xe2&\xfdL;>\xb0\xe07lG\xf0E\x9a\x8c\xc1.\xee\xf2a>\xef\b\xba\x9f\x0f\x00\x00\x00\x00\x00\x00c#\xe2\xe64\xb7\xb9\xefb\x96\xc9\xc8\x1d\xcfFeB\xe6),#J\x85\xa6\x19\x10\xc5\xaa+\xb1\x84Rn\x9a\xc587\xe1\x9f\x97\xda\vI\x93\x8f\xdcai\xaeGl\xf3\x1cc\x806\xe0\xe0\xe4\x9a\x1e\x13\xe5z,\x97\x16\x0e\xec+\xa0\xb4\xc7\xc6', 0x2, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)

16:20:50 executing program 5:
fanotify_mark(0xffffffffffffffff, 0x143, 0x0, 0xffffffffffffffff, 0x0)

16:20:50 executing program 0:
r0 = socket(0x1e, 0x5, 0x0)
sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/43, 0x2b}}, {{0x0, 0x1de, &(0x7f00000037c0)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x11b, 0x0, 0xd6}}], 0x2, 0x3, 0x0)

16:20:50 executing program 5:
fanotify_mark(0xffffffffffffffff, 0x143, 0x0, 0xffffffffffffffff, 0x0)

16:20:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000580)="f948fac3e8138e6575ad4edf55ecc0fc2be24af7f0bbe4289ca12c041c5e5856280efc44d5bb9c5a41bacafaf22dd25d7d23f58bcab29ed095cbf2113045a5b08f42be8197d3c0670157f1a056eab215ec89e88d398a687986cbb714000001000000000054be58d73020f2f6af2b0f314f17ea", 0xffffffe4)

16:20:50 executing program 0:
r0 = socket(0x1e, 0x5, 0x0)
sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/43, 0x2b}}, {{0x0, 0x1de, &(0x7f00000037c0)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x11b, 0x0, 0xd6}}], 0x2, 0x3, 0x0)

16:20:50 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.swap.max\x00\xb6\xb1\xb9\xf8\xa2\x01\x8c\x83\x9cq\x03 \x01*\a<\x91N\x1e\x91YV\xc2\xa2>\xcc\xef\x1c\xa5\xae\xa3#u\x17\xe1\xee\xa7\x808\xb4\xdaq#7\xee\x94\xd4[jN\xd1\xa9k\xae\xac\xd3\x9f\xe2&\xfdL;>\xb0\xe07lG\xf0E\x9a\x8c\xc1.\xee\xf2a>\xef\b\xba\x9f\x0f\x00\x00\x00\x00\x00\x00c#\xe2\xe64\xb7\xb9\xefb\x96\xc9\xc8\x1d\xcfFeB\xe6),#J\x85\xa6\x19\x10\xc5\xaa+\xb1\x84Rn\x9a\xc587\xe1\x9f\x97\xda\vI\x93\x8f\xdcai\xaeGl\xf3\x1cc\x806\xe0\xe0\xe4\x9a\x1e\x13\xe5z,\x97\x16\x0e\xec+\xa0\xb4\xc7\xc6', 0x2, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)

[ 1677.883525][T11637] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1677.893430][T11634] usb 4-1: new high-speed USB device number 21 using dummy_hcd
16:20:51 executing program 5:
fanotify_mark(0xffffffffffffffff, 0x143, 0x0, 0xffffffffffffffff, 0x0)

[ 1678.127820][T11637] usb 5-1: Using ep0 maxpacket: 16
[ 1678.135289][T11634] usb 4-1: Using ep0 maxpacket: 16
[ 1678.253202][T11637] usb 5-1: config index 0 descriptor too short (expected 58986, got 36)
[ 1678.261938][T11637] usb 5-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[ 1678.271334][T11637] usb 5-1: config 161 has 1 interface, different from the descriptor's value: 201
[ 1678.280776][T11637] usb 5-1: config 161 has no interface number 0
[ 1678.287216][T11637] usb 5-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[ 1678.297355][T11637] usb 5-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[ 1678.307535][T11637] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 1678.316703][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1678.325693][T11634] usb 4-1: config index 0 descriptor too short (expected 58986, got 36)
[ 1678.334258][T11634] usb 4-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[ 1678.343303][T11634] usb 4-1: config 161 has 1 interface, different from the descriptor's value: 201
[ 1678.352574][T11634] usb 4-1: config 161 has no interface number 0
[ 1678.359017][T11634] usb 4-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
[ 1678.369007][T11634] usb 4-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[ 1678.379244][T11634] usb 4-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 1678.388428][T11634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1678.653012][T11637] usb 5-1: GET_CAPABILITIES returned ffffff80
[ 1678.659186][T11637] usbtmc 5-1:161.8: can't read capabilities
[ 1678.666469][T11634] usb 4-1: GET_CAPABILITIES returned 60
[ 1678.672092][T11634] usbtmc 4-1:161.8: can't read capabilities
[ 1678.902837][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912342][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1678.912630][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1679.043457][    C0] usbtmc 5-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1679.057189][T11852] usbtmc 5-1:161.8: Unable to send data, error -71
[ 1679.085998][T11637] usb 5-1: USB disconnect, device number 46
[ 1679.150266][T11634] usb 4-1: USB disconnect, device number 21
16:20:52 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f908, 0xfffdfffffffffffe, [0x7000000], @string=&(0x7f0000000040)}})

16:20:52 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.swap.max\x00\xb6\xb1\xb9\xf8\xa2\x01\x8c\x83\x9cq\x03 \x01*\a<\x91N\x1e\x91YV\xc2\xa2>\xcc\xef\x1c\xa5\xae\xa3#u\x17\xe1\xee\xa7\x808\xb4\xdaq#7\xee\x94\xd4[jN\xd1\xa9k\xae\xac\xd3\x9f\xe2&\xfdL;>\xb0\xe07lG\xf0E\x9a\x8c\xc1.\xee\xf2a>\xef\b\xba\x9f\x0f\x00\x00\x00\x00\x00\x00c#\xe2\xe64\xb7\xb9\xefb\x96\xc9\xc8\x1d\xcfFeB\xe6),#J\x85\xa6\x19\x10\xc5\xaa+\xb1\x84Rn\x9a\xc587\xe1\x9f\x97\xda\vI\x93\x8f\xdcai\xaeGl\xf3\x1cc\x806\xe0\xe0\xe4\x9a\x1e\x13\xe5z,\x97\x16\x0e\xec+\xa0\xb4\xc7\xc6', 0x2, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)

16:20:52 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xf79, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, 0xfffffffffffffffe)

16:20:52 executing program 5:
fanotify_mark(0xffffffffffffffff, 0x143, 0x0, 0xffffffffffffffff, 0x0)

16:20:52 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003900)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000080)="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", 0xffffff9c)

16:20:52 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.swap.max\x00\xb6\xb1\xb9\xf8\xa2\x01\x8c\x83\x9cq\x03 \x01*\a<\x91N\x1e\x91YV\xc2\xa2>\xcc\xef\x1c\xa5\xae\xa3#u\x17\xe1\xee\xa7\x808\xb4\xdaq#7\xee\x94\xd4[jN\xd1\xa9k\xae\xac\xd3\x9f\xe2&\xfdL;>\xb0\xe07lG\xf0E\x9a\x8c\xc1.\xee\xf2a>\xef\b\xba\x9f\x0f\x00\x00\x00\x00\x00\x00c#\xe2\xe64\xb7\xb9\xefb\x96\xc9\xc8\x1d\xcfFeB\xe6),#J\x85\xa6\x19\x10\xc5\xaa+\xb1\x84Rn\x9a\xc587\xe1\x9f\x97\xda\vI\x93\x8f\xdcai\xaeGl\xf3\x1cc\x806\xe0\xe0\xe4\x9a\x1e\x13\xe5z,\x97\x16\x0e\xec+\xa0\xb4\xc7\xc6', 0x2, 0x0)
sendfile(r1, r1, &(0x7f00000000c0), 0xfdef)

16:20:52 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x8)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040))

16:20:52 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
poll(&(0x7f0000000000)=[{r2}], 0x1, 0x80)
sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)

[ 1679.955616][T11634] usb 4-1: new high-speed USB device number 22 using dummy_hcd
16:20:53 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f908, 0xfffdfffffffffffe, [0x7000000], @string=&(0x7f0000000040)}})

16:20:53 executing program 1:
clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100))
ptrace(0x10, r0)
ptrace$getsig(0x18, r0, 0x0, 0x0)

16:20:53 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xf79, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, 0xfffffffffffffffe)

[ 1680.204061][T11634] usb 4-1: Using ep0 maxpacket: 16
16:20:53 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x8)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040))

[ 1680.323295][T11634] usb 4-1: config index 0 descriptor too short (expected 58986, got 36)
[ 1680.331881][T11634] usb 4-1: config 161 has too many interfaces: 201, using maximum allowed: 32
[ 1680.341041][T11634] usb 4-1: config 161 has 1 interface, different from the descriptor's value: 201
[ 1680.350437][T11634] usb 4-1: config 161 has no interface number 0
[ 1680.357140][T11634] usb 4-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9
16:20:53 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0xe)
write(r0, &(0x7f0000000000)="1300000042005f0214f9f40700000005000033", 0x13)

16:20:53 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f908, 0xfffdfffffffffffe, [0x7000000], @string=&(0x7f0000000040)}})

[ 1680.367174][T11634] usb 4-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24
[ 1680.377450][T11634] usb 4-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 1680.387096][T11634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:20:53 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xf79, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, 0xfffffffffffffffe)

16:20:53 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x8)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040))

[ 1680.943015][T11634] usb 4-1: GET_CAPABILITIES returned 0
[ 1680.948623][T11634] usbtmc 4-1:161.8: can't read capabilities
[ 1681.182751][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192317][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.192613][    C0] usbtmc 4-1:161.8: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1681.334738][T12094] usbtmc 4-1:161.8: Unable to send data, error -71
[ 1681.343097][T11634] usb 4-1: USB disconnect, device number 22
16:20:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0)

16:20:54 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f908, 0xfffdfffffffffffe, [0x7000000], @string=&(0x7f0000000040)}})

16:20:54 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x8)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040))

16:20:54 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0xe)
write(r0, &(0x7f0000000000)="1300000042005f0214f9f40700000005000033", 0x13)

16:20:54 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xf79, 0x0)
ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, 0xfffffffffffffffe)

16:20:55 executing program 3:
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0})

16:20:55 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0xe)
write(r0, &(0x7f0000000000)="1300000042005f0214f9f40700000005000033", 0x13)

16:20:55 executing program 4:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1})

16:20:55 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0xfca1)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x1ff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10)
recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x400020fe)

16:20:55 executing program 0:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:55 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0xe)
write(r0, &(0x7f0000000000)="1300000042005f0214f9f40700000005000033", 0x13)

16:20:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0)

16:20:55 executing program 3:
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0})

16:20:55 executing program 4:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1})

16:20:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2}, {@in=@broadcast, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

16:20:55 executing program 0:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:55 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:55 executing program 3:
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0})

16:20:55 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0)

16:20:55 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2}, {@in=@broadcast, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

16:20:55 executing program 0:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:56 executing program 4:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1})

16:20:56 executing program 3:
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0})

16:20:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0)

16:20:56 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2}, {@in=@broadcast, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

16:20:56 executing program 4:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1})

16:20:56 executing program 0:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:56 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:56 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0xffffca88}}}}}, 0x0)

16:20:56 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2}, {@in=@broadcast, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

16:20:56 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000007000000dc0000004000000095000000000000007ba8f8740a57b5111e02a1225aca5084ece5b14749eecd8d05dd8f4f0c3c6eca3479a47c7091238ef1ece70752f8dcecff81d95fab94ca4ebe2cd4dac3905f8c430561c8508f666a5c63c4b5e7b8f598131915467b818129b1adda5b0eb66d80e9c8d932a7e5cdea48e97b6be45bd7d3b4add368b68463371ffa75ecb1dcc11a1f29720a1dd720f9d30821880aef95765dc954c3de9737a825eb8fd1d68f19d0ddcc52d674ae3262fb4b48cb3aa9b8755cefa6fd56041f2d849a2a07f8e21c2b8e946933c8b9682e061318fa1100b5b1a3434c24e563fb516d65aea7cf8a464dcf49a3114887b6fd27327e9c2cb8df6c4b3cdafab5aafda0c4926e53b2d6b46856356526de62cee02b6113412c537489004b1301b14a93ff16f721206d850a0a523205e70c06088c0a8a6b39e331"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

16:20:56 executing program 4:
clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x4)
ptrace$cont(0x4202, r0, 0x0, 0x0)

16:20:56 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0xc02, &(0x7f0000000040)=<r1=>0x0)
close(r0)
syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1683.689234][T13511] net_ratelimit: 2 callbacks suppressed
[ 1683.689269][T13511] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1
16:20:56 executing program 5:
clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
r3 = gettid()
tkill(r3, 0x14)
ptrace(0x4206, r2)
wait4(0x0, &(0x7f0000000040), 0x0, 0x0)

16:20:56 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000fd0000"], 0x18}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000005c00), 0x6ab, 0x0)

16:20:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0xc02, &(0x7f0000000040)=<r1=>0x0)
close(r0)
syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

16:20:57 executing program 4:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000000000000)

16:20:57 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0xffffca88}}}}}, 0x0)

16:20:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0xc02, &(0x7f0000000040)=<r1=>0x0)
close(r0)
syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

16:20:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000033001901000000000000000004000000ffd38d9b0c0001000600060009"], 0x1}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x11001, 0x0)

[ 1684.265881][T13974] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1
16:20:57 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0xffffca88}}}}}, 0x0)

16:20:57 executing program 4:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000000000000)

[ 1684.538595][T14145] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1
16:20:57 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

16:20:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0xc02, &(0x7f0000000040)=<r1=>0x0)
close(r0)
syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

16:20:57 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0xffffca88}}}}}, 0x0)

[ 1684.807060][T14289] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x1
16:20:59 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0)

16:20:59 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

16:20:59 executing program 4:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000000000000)

16:20:59 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

16:20:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xe1], [0xc1]})

16:20:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000200)=@ethtool_ringparam={0xf}})

[ 1686.893774][T14298] binder: 14297:14298 ioctl c0046209 0 returned -22
16:21:00 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000007000000dc0000004000000095000000000000007ba8f8740a57b5111e02a1225aca5084ece5b14749eecd8d05dd8f4f0c3c6eca3479a47c7091238ef1ece70752f8dcecff81d95fab94ca4ebe2cd4dac3905f8c430561c8508f666a5c63c4b5e7b8f598131915467b818129b1adda5b0eb66d80e9c8d932a7e5cdea48e97b6be45bd7d3b4add368b68463371ffa75ecb1dcc11a1f29720a1dd720f9d30821880aef95765dc954c3de9737a825eb8fd1d68f19d0ddcc52d674ae3262fb4b48cb3aa9b8755cefa6fd56041f2d849a2a07f8e21c2b8e946933c8b9682e061318fa1100b5b1a3434c24e563fb516d65aea7cf8a464dcf49a3114887b6fd27327e9c2cb8df6c4b3cdafab5aafda0c4926e53b2d6b46856356526de62cee02b6113412c537489004b1301b14a93ff16f721206d850a0a523205e70c06088c0a8a6b39e331"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

16:21:00 executing program 4:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x8000000000000000)

16:21:00 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0x40044104, 0x0)

16:21:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000200)=@ethtool_ringparam={0xf}})

16:21:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015070000000093ac5c1500000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newqdisc={0x6c, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x6c}}, 0x0)

16:21:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

16:21:00 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0)

16:21:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xe1], [0xc1]})

[ 1687.429372][T14763] binder: 14761:14763 ioctl c0046209 0 returned -22
16:21:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000200)=@ethtool_ringparam={0xf}})

16:21:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

16:21:00 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xe1], [0xc1]})

16:21:00 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0)

16:21:00 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

[ 1687.770825][T14979] binder: 14963:14979 ioctl c0046209 0 returned -22
16:21:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

16:21:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

[ 1687.898158][T14994] binder: 14991:14994 ioctl c0046209 0 returned -22
16:21:01 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000200)=@ethtool_ringparam={0xf}})

16:21:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

16:21:01 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0)

16:21:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0xe1], [0xc1]})

[ 1688.154850][T15006] binder: 15005:15006 ioctl c0046209 0 returned -22
[ 1688.189094][T15018] binder: 15016:15018 ioctl c0046209 0 returned -22
16:21:01 executing program 3:
unshare(0x2000400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x41, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x741)

16:21:01 executing program 2:
r0 = socket$inet(0x10, 0x8000000000003, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000001e0007041dfffd946f610500020000000000000000000000080003000400017e", 0x24}], 0x1}, 0x0)

16:21:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0)

16:21:01 executing program 5:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
readv(r1, &(0x7f0000395000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1002000000013)

16:21:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

[ 1688.541114][T15208] binder: 15206:15208 ioctl c0046209 0 returned -22
16:21:01 executing program 2:
r0 = socket$inet(0x10, 0x8000000000003, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000001e0007041dfffd946f610500020000000000000000000000080003000400017e", 0x24}], 0x1}, 0x0)

16:21:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

16:21:01 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x77, 0x4f, 0x2b, 0x8, 0x7ca, 0xa801, 0x3da2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x0, 0x22, 0xe, 0x3c}}]}}]}}, 0x0)

16:21:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

16:21:01 executing program 0:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x6)
sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000120007031dfffd946fa2830012000a0009000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)

16:21:02 executing program 2:
r0 = socket$inet(0x10, 0x8000000000003, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000001e0007041dfffd946f610500020000000000000000000000080003000400017e", 0x24}], 0x1}, 0x0)

16:21:02 executing program 3:
unshare(0x2000400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x41, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x741)

16:21:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

16:21:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

[ 1689.093435][T11634] usb 6-1: new high-speed USB device number 115 using dummy_hcd
16:21:02 executing program 2:
r0 = socket$inet(0x10, 0x8000000000003, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="240000001e0007041dfffd946f610500020000000000000000000000080003000400017e", 0x24}], 0x1}, 0x0)

16:21:02 executing program 3:
unshare(0x2000400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x41, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x741)

16:21:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r3})
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @random="6425fe8f87c2", 'bond_slave_1\x00'}}, 0x1e)

16:21:02 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0x76, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

16:21:02 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000000100000000000000e100000000000000", @ANYPTR, @ANYBLOB="000000000000000001f0100000000000ae00000000000000", @ANYPTR, @ANYBLOB="000000000000c6fe2e5306a32a30000001000000000000002c00000000000000", @ANYPTR, @ANYBLOB="000000faff000000000000000000007700000000000036cc00307fb8e405b30ae6c8eff6c35df68c46e028ff198fe49aaed103fd7b42f36f43225ebf019a5c5e27a7b7cbddfb66dcc51bfe866c871098dc7720110ea37b29c3b95155dc213eafa464b6a5d8cf940c87a29272a912e8c8e628411429ff3422b71099797300c7312b866ea946b9a62711"])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

[ 1689.333088][T11634] usb 6-1: Using ep0 maxpacket: 8
[ 1689.453878][T11634] usb 6-1: config 0 has an invalid interface number: 169 but max is 0
[ 1689.462167][T11634] usb 6-1: config 0 has no interface number 0
[ 1689.468872][T11634] usb 6-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=3d.a2
[ 1689.478120][T11634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.568155][T11634] usb 6-1: config 0 descriptor??
[ 1689.617524][T11634] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in cold state, will try to load a firmware
[ 1689.630028][T11634] usb 6-1: Direct firmware load for dvb-usb-avertv-a800-02.fw failed with error -2
[ 1689.640553][T11634] dvb-usb: did not find the firmware file 'dvb-usb-avertv-a800-02.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1689.656160][T11634] dvb_usb_a800: probe of 6-1:0.169 failed with error -2
[ 1689.821689][T11634] usb 6-1: USB disconnect, device number 115
[ 1690.602760][T11631] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1690.842739][T11631] usb 6-1: Using ep0 maxpacket: 8
[ 1690.963243][T11631] usb 6-1: config 0 has an invalid interface number: 169 but max is 0
[ 1690.971489][T11631] usb 6-1: config 0 has no interface number 0
[ 1690.977891][T11631] usb 6-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=3d.a2
[ 1690.987169][T11631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.996787][T11631] usb 6-1: config 0 descriptor??
[ 1691.047291][T11631] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in cold state, will try to load a firmware
[ 1691.059167][T11631] usb 6-1: Direct firmware load for dvb-usb-avertv-a800-02.fw failed with error -2
[ 1691.068739][T11631] dvb-usb: did not find the firmware file 'dvb-usb-avertv-a800-02.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1691.084389][T11631] dvb_usb_a800: probe of 6-1:0.169 failed with error -2
[ 1691.245020][T11631] usb 6-1: USB disconnect, device number 116
16:21:04 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x77, 0x4f, 0x2b, 0x8, 0x7ca, 0xa801, 0x3da2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x0, 0x22, 0xe, 0x3c}}]}}]}}, 0x0)

16:21:04 executing program 3:
unshare(0x2000400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x41, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x741)

16:21:04 executing program 2:
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
mremap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005c2000/0x2000)=nil)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

16:21:04 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0)
sendto$inet(r0, &(0x7f0000000900)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52eee7b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0xfffffff1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000007f000000c18ea5d9f0"], 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}], 0x4de, 0x0, 0x0)

16:21:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0x76, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

16:21:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x0, 0x2100002}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x254)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0)

16:21:04 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0x76, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

16:21:04 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x1b, 0x5}})

16:21:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x1b, 0x5}})

16:21:05 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0x76, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

16:21:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x1b, 0x5}})

[ 1692.153033][T11631] usb 6-1: new high-speed USB device number 117 using dummy_hcd
16:21:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x0, 0x2100002}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x254)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0)

[ 1692.414257][T11631] usb 6-1: Using ep0 maxpacket: 8
[ 1692.543144][T11631] usb 6-1: config 0 has an invalid interface number: 169 but max is 0
[ 1692.551465][T11631] usb 6-1: config 0 has no interface number 0
[ 1692.557844][T11631] usb 6-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=3d.a2
[ 1692.568383][T11631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.579583][T11631] usb 6-1: config 0 descriptor??
[ 1692.627123][T11631] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in cold state, will try to load a firmware
[ 1692.639417][T11631] usb 6-1: Direct firmware load for dvb-usb-avertv-a800-02.fw failed with error -2
[ 1692.648959][T11631] dvb-usb: did not find the firmware file 'dvb-usb-avertv-a800-02.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1692.664636][T11631] dvb_usb_a800: probe of 6-1:0.169 failed with error -2
[ 1692.886813][T11634] usb 6-1: USB disconnect, device number 117
16:21:06 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x77, 0x4f, 0x2b, 0x8, 0x7ca, 0xa801, 0x3da2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x0, 0x22, 0xe, 0x3c}}]}}]}}, 0x0)

16:21:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_ivalue=0x10001})

16:21:06 executing program 2:
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
mremap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005c2000/0x2000)=nil)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

16:21:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x1b, 0x5}})

16:21:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x0, 0x2100002}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x254)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0)

16:21:06 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0)
sendto$inet(r0, &(0x7f0000000900)="ba671368d1010000004900000001000000018be49e9301442865319997d0efdb2f54b6a10c7327757482bfce945c2a91fb8dfafc1d3f56bc543ab87321e12cca08a744a2d128b00634bc882151d36809229a96bc3437ef159489384ade077ba295eac2882dbfd3781dd4d4e609c42628dbb709b3eb1fa030009045dd98b9e6d77b6cec9ceb685595d43995e0f04c32260943add79831e661c6a351dedc8b9d220fbf9fb6e44fb6a629ce9a82025124fec9f3ee751f7da0cd7e799be88ddbdac20b48e890ff81d7fa28c2d017d7932f2569038740461accd4582f576e4fdb6150a3399f8266bc19eb943648ad1ad81420ed6c382436e474390c8995e829e4f9df43eed85a60b9ee254e31eb62900857fa134e76cc64880334adbff069a2e5e647d2ed36a96b23834b6f6ca6b8113baf4cf30347fbb7ffc30aea99872cc0dba03b07d3347b2d257edbe2733c26b7337a79962d8ce85469e3bcbe0e4a48a6ae69d13f2d4b5155b390ef67aa714b82b6313ee277cb8986eca5db2e97cb1ae2243bba80274f614ece521baef484394b4c161cb9ae926e21892578b49cfd6efe1cb1572148c10d92218ed73ec116a18de80ac42d2726a4523a764fc6dc356c5fbbf9d2c947ae3bc9a3dc76099f3257c8d5952876151b0326d8cb1d5683ee4ad5ded9a34c00ac1b03f34627ec18a7c2e92c87b7896549cfab5eb55fa85a970994bd4b22b5f0d045e241256d06f485a47b4a55ed389bc1734541232cd41908b5cfa4b8fcfcafce500a0c7ae99767713a98e7927aa69f6ccd7daea62f19ceb82559f41899c9a9aee99113e7e64b5f8b9824be9fdbfa4dd4995673d882bb4daeb64413b334e114965d2ba3cea8051e692508701b9400cb12eae457f8b8549944091b729160939918d8fcae611a5ded665f770db637487a236da1a58ba7566668651a77171fc4fe506496d19059343dbe4f426625d3f2b705f54581372361770bf5a9098a9fafefaf546426b294239ac33e3186e4d58ad2fa995a6ad4dc074e7cca11aead109563b2076c7c6e9f57ec63df960804e2e7f9d8444de9550cca3df7834d864e9777291c2e1f6205de2e43dc995ab8bb1515a365efc2830fa3e7a1dd137f550d6035212bc1f51c3b4ceea430df49ffc9210084ef156ad7e0d219efd6c116693735b44521d389969a3a65617cd2fd6e14060601cee4cd054cf36fe048b57d1d9ee3cad2a73552449926b4a69823823af35bc53e9d339be086e8b03fbe9c0ec68357e1fbe52eee7b67f5870c0aefb7ee8236747e0d67a26725fb515544cbbe8464da94cfd8c0b94bb4e51a263b1749bd0a7cf651931f806d1b928d1f9994f1ad4d50e6a5cd7a8e4e687f8564fdacc864013d095ba9d5709eced3c28eabda476d177a7836400a01e02beeb5a6636d4064fdda344967ad8682d14b87c71727cb66be27d1d39191f4223c545b62fb4860262ba8076a65dbc194cee1df846c584b7bbe9dce6e6895b2cbbb64b03b5554a4845cc3de2f939ef918421af9a5e9157e837651245299c03992d0ddee06bd22a31522aca0f309b1feccebc0b1c0ed9d21c19bfd15cd313ff64394fd6a10904890c9f6d646b026f27253e8f584c3ffd20ad67e8b", 0x480, 0x0, 0x0, 0xfffffff1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000007f000000c18ea5d9f0"], 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}], 0x4de, 0x0, 0x0)

16:21:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x0, 0x2100002}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x254)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0)

16:21:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_ivalue=0x10001})

16:21:06 executing program 2:
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
mremap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005c2000/0x2000)=nil)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

16:21:06 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc901, 0x0, 0xc00000}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

16:21:06 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, 0xe8)

[ 1693.772976][T11631] usb 6-1: new high-speed USB device number 118 using dummy_hcd
16:21:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_ivalue=0x10001})

[ 1694.013302][T11631] usb 6-1: Using ep0 maxpacket: 8
[ 1694.133060][T11631] usb 6-1: config 0 has an invalid interface number: 169 but max is 0
[ 1694.141300][T11631] usb 6-1: config 0 has no interface number 0
[ 1694.148012][T11631] usb 6-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=3d.a2
[ 1694.157308][T11631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.166732][T11631] usb 6-1: config 0 descriptor??
[ 1694.207243][T11631] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in cold state, will try to load a firmware
[ 1694.219228][T11631] usb 6-1: Direct firmware load for dvb-usb-avertv-a800-02.fw failed with error -2
[ 1694.229152][T11631] dvb-usb: did not find the firmware file 'dvb-usb-avertv-a800-02.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1694.244782][T11631] dvb_usb_a800: probe of 6-1:0.169 failed with error -2
[ 1694.410916][T11634] usb 6-1: USB disconnect, device number 118
16:21:08 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x77, 0x4f, 0x2b, 0x8, 0x7ca, 0xa801, 0x3da2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x0, 0x22, 0xe, 0x3c}}]}}]}}, 0x0)

16:21:08 executing program 2:
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
mremap(&(0x7f00002e8000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005c2000/0x2000)=nil)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

16:21:08 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc901, 0x0, 0xc00000}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

16:21:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, 0xe8)

16:21:08 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_ivalue=0x10001})

16:21:08 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000007f000000c18ea5d9f0"], 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}], 0x4de, 0x0, 0x0)

16:21:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, 0xe8)

16:21:08 executing program 4:
r0 = socket(0xa, 0x80002, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3f, 0x4)
recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0)

16:21:08 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc901, 0x0, 0xc00000}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

16:21:08 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@rand_addr="1003d3e1f7cb2f672a22a665b795df82", @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, 0xe8)

16:21:08 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

[ 1695.303774][T11634] usb 6-1: new high-speed USB device number 119 using dummy_hcd
16:21:08 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xf, 0xc901, 0x0, 0xc00000}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

[ 1695.553187][T11634] usb 6-1: Using ep0 maxpacket: 8
[ 1695.675212][T11634] usb 6-1: config 0 has an invalid interface number: 169 but max is 0
[ 1695.683715][T11634] usb 6-1: config 0 has no interface number 0
[ 1695.690068][T11634] usb 6-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=3d.a2
[ 1695.699405][T11634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.709614][T11634] usb 6-1: config 0 descriptor??
[ 1695.757325][T11634] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in cold state, will try to load a firmware
[ 1695.769802][T11634] usb 6-1: Direct firmware load for dvb-usb-avertv-a800-02.fw failed with error -2
[ 1695.779464][T11634] dvb-usb: did not find the firmware file 'dvb-usb-avertv-a800-02.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1695.795051][T11634] dvb_usb_a800: probe of 6-1:0.169 failed with error -2
[ 1695.986901][T11634] usb 6-1: USB disconnect, device number 119
16:21:09 executing program 4:
r0 = socket(0xa, 0x80002, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3f, 0x4)
recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0)

16:21:09 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

16:21:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

16:21:09 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
write$UHID_DESTROY(r3, &(0x7f0000000200), 0xffffff77)
write$uinput_user_dev(r3, 0x0, 0x0)
tkill(r0, 0x1000000000016)

16:21:09 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0)
sendto$inet(r0, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000007f000000c18ea5d9f0"], 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000}}], 0x4de, 0x0, 0x0)

16:21:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004040)={&(0x7f0000004000), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x205, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IF_NETNSID={0x8}]}, 0x30}}, 0x0)

16:21:09 executing program 4:
r0 = socket(0xa, 0x80002, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3f, 0x4)
recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0)

16:21:09 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

16:21:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004040)={&(0x7f0000004000), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x205, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IF_NETNSID={0x8}]}, 0x30}}, 0x0)

16:21:10 executing program 4:
r0 = socket(0xa, 0x80002, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000280)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3f, 0x4)
recvfrom(r0, 0x0, 0x0, 0x12062, 0x0, 0x0)

16:21:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48e}]})

16:21:10 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

16:21:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004040)={&(0x7f0000004000), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x205, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IF_NETNSID={0x8}]}, 0x30}}, 0x0)

16:21:10 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

16:21:10 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

16:21:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004040)={&(0x7f0000004000), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x205, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IF_NETNSID={0x8}]}, 0x30}}, 0x0)

16:21:10 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/92}, 0x18)

16:21:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
read(r0, 0x0, 0x0)

16:21:10 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001840)=""/176, 0xb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

16:21:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48e}]})

[ 1697.568510][T16791] input: syz1 as /devices/virtual/input/input250
16:21:10 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/92}, 0x18)

16:21:10 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

16:21:10 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

16:21:11 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/92}, 0x18)

16:21:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48e}]})

16:21:11 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001840)=""/176, 0xb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

16:21:11 executing program 1:
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000005e0007031dfffd956f61050007dfc211fe000002ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x28e}], 0x1}, 0x0)

16:21:11 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

[ 1698.210284][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
16:21:11 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/92}, 0x18)

16:21:11 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001840)=""/176, 0xb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

16:21:11 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

16:21:11 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000003c0)="f8", 0xca9c, 0x4000000, 0x0, 0x0)

16:21:11 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001840)=""/176, 0xb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
preadv(r0, &(0x7f00000017c0), 0x315, 0x0)

16:21:11 executing program 1:
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000005e0007031dfffd956f61050007dfc211fe000002ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x28e}], 0x1}, 0x0)

16:21:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48e}]})

16:21:11 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

[ 1698.845729][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
16:21:12 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:12 executing program 1:
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000005e0007031dfffd956f61050007dfc211fe000002ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x28e}], 0x1}, 0x0)

16:21:12 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

[ 1699.127992][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
16:21:12 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0x20)

16:21:12 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

16:21:12 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000003c0)="f8", 0xca9c, 0x4000000, 0x0, 0x0)

16:21:12 executing program 1:
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000005e0007031dfffd956f61050007dfc211fe000002ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x28e}], 0x1}, 0x0)

16:21:12 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:12 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:12 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0x20)

16:21:12 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

[ 1699.530396][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
16:21:12 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000003c0)="f8", 0xca9c, 0x4000000, 0x0, 0x0)

16:21:12 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:12 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0x20)

16:21:12 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:12 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 2:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2404c8c1, &(0x7f0000000180)={0xa, 0x400000000004e24, 0x0, @mcast2}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000005140)={0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000003c0)="f8", 0xca9c, 0x4000000, 0x0, 0x0)

16:21:13 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}], 0x20)

16:21:13 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:13 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:13 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:13 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:13 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:14 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:14 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:15 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:15 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:15 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:15 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:15 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:15 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:15 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:15 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:15 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1702.844349][T17981] binder: 17980:17981 ioctl 40046205 0 returned -22
16:21:16 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:16 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

16:21:16 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

[ 1703.129213][T17993] binder: 17992:17993 ioctl 40046205 0 returned -22
16:21:16 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

16:21:16 executing program 5:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:16 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10064, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], &(0x7f0000000140), 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0)

16:21:16 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441f08edffffffe7c94ef56491ee54f123c72274ed27c1c6fe76cef3e24feace6a395713daa48d90b2d6d1b671136e665424523adc3b12410b365d26d36eabd945357f8fd33158b87706aebe81b4066e161dc8479e9e2775da4e82528a22567db875fbf5", 0x64)
sysinfo(&(0x7f0000000080)=""/138)
r1 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x80013, r1, 0x4)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140))
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r2)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/174)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x200, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000200)=0xb)
r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r5=>0xffffffffffffffff})
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x130000015})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x0)
r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, <r8=>0xffffffffffffffff})
r9 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x130000015})
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r10, 0x9)
r11 = socket$netlink(0x10, 0x3, 0x0)
dup3(r11, r10, 0x0)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400)='NET_DM\x00')
r13 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r13, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
listen(r13, 0x9)
r14 = socket$netlink(0x10, 0x3, 0x0)
dup3(r14, r13, 0x0)
sendmsg$NET_DM_CMD_START(r14, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000014}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, r12, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x21011}, 0x40000)
epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x0)
splice(r6, &(0x7f0000000240), r9, &(0x7f0000000380)=0x18, 0x5, 0x6)

16:21:16 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

[ 1703.711035][T18109] binder: 18105:18109 ioctl 40046205 0 returned -22
16:21:17 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

16:21:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

[ 1704.100332][T18117] binder: 18116:18117 ioctl 40046205 0 returned -22
16:21:17 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r2, 0x609}, 0x14}}, 0x0)

16:21:17 executing program 5:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
read(r0, &(0x7f0000000180)=""/393, 0x189)
close(r0)
r3 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x400003fff)
r4 = gettid()
fcntl$setown(r3, 0x8, r4)
rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8)
fcntl$setsig(r3, 0xa, 0x17)
inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000960)
mkdir(&(0x7f0000000140)='./control/file0\x00', 0x0)

16:21:17 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:17 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

16:21:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r2, 0x609}, 0x14}}, 0x0)

16:21:18 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x7, @output})

16:21:18 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
sendto$inet(r0, 0x0, 0x27a, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x4, 0x0, 0x2}}, 0x30)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf)
semget(0x3, 0x0, 0x8)
ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x1f})
r2 = socket(0x400020000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="1f00000068000d0000000000fc07ff1b070404000400000007000100010039", 0x2b4)
r3 = socket(0x400020000000010, 0x3, 0x0)
write(r3, &(0x7f0000000040)="1f00000068000d0000000000fc07ff1b0704040004000000070001000100", 0x1e)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={<r4=>0x0, 0x7}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r4, 0xec63}, &(0x7f0000000280)=0x8)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)

16:21:18 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

16:21:18 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x200)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x2)
setns(r1, 0x0)

16:21:18 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x7, @output})

16:21:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x1a7, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:21:18 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

16:21:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r2, 0x609}, 0x14}}, 0x0)

16:21:18 executing program 1:
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000063efbef6e1d59e9af921bc3e0e9482b0e7d81a686697cc03933f7908e01a88ac40"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2})
sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r0})

16:21:18 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x7, @output})

16:21:18 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

16:21:18 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r2, 0x609}, 0x14}}, 0x0)

16:21:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x1a7, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:21:18 executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r1 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc0386106, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
tkill(r0, 0x16)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

16:21:18 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x7, @output})

16:21:18 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

16:21:19 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2}, 0x98)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

16:21:19 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x1a7, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:21:19 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x100, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})

16:21:19 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

16:21:19 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x1a7, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:21:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

16:21:19 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@local}, {}, {}, 0x0, 0x0, 0x0, 0x7d4c2db2ee29e95}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0xe8)

16:21:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1706.453261][T16697] usb 2-1: new high-speed USB device number 121 using dummy_hcd
16:21:19 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4)

16:21:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

16:21:19 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@local}, {}, {}, 0x0, 0x0, 0x0, 0x7d4c2db2ee29e95}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0xe8)

[ 1706.702990][T16697] usb 2-1: Using ep0 maxpacket: 16
16:21:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000300)=[@acquire, @release], 0x0, 0x0, 0x0})

[ 1706.844893][T16697] usb 2-1: config index 0 descriptor too short (expected 5635, got 238)
[ 1706.853528][T16697] usb 2-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config
[ 1706.863942][T16697] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1706.877107][T16697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1706.886324][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:21:19 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@local}, {}, {}, 0x0, 0x0, 0x0, 0x7d4c2db2ee29e95}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0xe8)

[ 1707.015423][T19066] debugfs: File '19065' in directory 'proc' already present!
[ 1707.135673][T16697] usb 2-1: selecting invalid altsetting 1
[ 1707.573383][T16697] usb 2-1: selecting invalid altsetting 1
[ 1707.579197][T16697] cdc_ncm 2-1:1.0: bind() failure
[ 1707.766799][T11634] usb 2-1: USB disconnect, device number 121
[ 1708.532880][T16697] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1708.772950][T16697] usb 2-1: Using ep0 maxpacket: 16
[ 1708.892955][T16697] usb 2-1: config index 0 descriptor too short (expected 5635, got 238)
[ 1708.901567][T16697] usb 2-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config
[ 1708.912024][T16697] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1708.925130][T16697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1708.934472][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1708.985559][T16697] usb 2-1: selecting invalid altsetting 1
16:21:22 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x100, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})

16:21:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000300)=[@acquire, @release], 0x0, 0x0, 0x0})

16:21:22 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:22 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x1c0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

16:21:22 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:22 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@local}, {}, {}, 0x0, 0x0, 0x0, 0x7d4c2db2ee29e95}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0xe8)

[ 1709.245293][T16697] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 1709.251465][T16697] cdc_ncm 2-1:1.0: bind() failure
[ 1709.300806][T19179] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
[ 1709.329529][T16697] usb 2-1: USB disconnect, device number 122
[ 1709.355873][T19186] debugfs: File '19184' in directory 'proc' already present!
16:21:22 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000300)=[@acquire, @release], 0x0, 0x0, 0x0})

[ 1709.560336][T19335] debugfs: File '19320' in directory 'proc' already present!
16:21:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000300)=[@acquire, @release], 0x0, 0x0, 0x0})

16:21:22 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x1c0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1709.771541][T19440] debugfs: File '19430' in directory 'proc' already present!
[ 1709.813104][T16697] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1709.850245][T19503] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
16:21:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmsg(r1, &(0x7f0000013000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x28, 0x29, 0x5, "21020201cb009f00"/17}], 0x28}, 0x0)

16:21:23 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x1c0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1710.073056][T16697] usb 2-1: Using ep0 maxpacket: 16
[ 1710.121899][T19633] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
[ 1710.206567][T16697] usb 2-1: config index 0 descriptor too short (expected 5635, got 238)
[ 1710.215315][T16697] usb 2-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config
[ 1710.225794][T16697] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1710.238923][T16697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1710.248134][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1710.319318][T16697] usb 2-1: selecting invalid altsetting 1
[ 1710.763168][T16697] usb 2-1: selecting invalid altsetting 1
[ 1710.769018][T16697] cdc_ncm 2-1:1.0: bind() failure
[ 1710.950117][T11634] usb 2-1: USB disconnect, device number 123
16:21:24 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x100, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})

16:21:24 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:24 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:24 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x1c0, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

16:21:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmsg(r1, &(0x7f0000013000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x28, 0x29, 0x5, "21020201cb009f00"/17}], 0x28}, 0x0)

16:21:24 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

[ 1711.555249][T19725] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
16:21:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmsg(r1, &(0x7f0000013000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x28, 0x29, 0x5, "21020201cb009f00"/17}], 0x28}, 0x0)

16:21:24 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmsg(r1, &(0x7f0000013000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x28, 0x29, 0x5, "21020201cb009f00"/17}], 0x28}, 0x0)

[ 1711.882967][T16697] usb 2-1: new high-speed USB device number 124 using dummy_hcd
16:21:25 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcf, 0x0, 0x4)

16:21:25 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000013000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000001fc0)={0x2bc, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}]}]}, 0x2bc}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

16:21:25 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:25 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcf, 0x0, 0x4)

[ 1712.132981][T16697] usb 2-1: Using ep0 maxpacket: 16
[ 1712.263147][T16697] usb 2-1: config index 0 descriptor too short (expected 5635, got 238)
[ 1712.271741][T16697] usb 2-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config
[ 1712.282333][T16697] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1712.295496][T16697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1712.304736][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1712.508613][T16697] usb 2-1: selecting invalid altsetting 1
[ 1712.944135][T16697] usb 2-1: selecting invalid altsetting 1
[ 1712.949948][T16697] cdc_ncm 2-1:1.0: bind() failure
[ 1713.139836][T11634] usb 2-1: USB disconnect, device number 124
16:21:26 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x100, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000000010902031601010000000904000012020d0000052406000005240000000d240f010000000000000a000006241a00000007241400000000a2241307a95a7e5f106259c90a9da0216109f0517ef3ae9fb3a19cffc4dfddf54b8d60842133377e66a046a3a37a03e5d50687a536390815e2c76a4fa16231a1c86e6e3a51bb210d88b5ba9934317203587aaea04c1edc9d3f96890bfabb732f0bc5b148653b0ed92116e8f87fa39b639068767ecf617210a96e9a8f13237ad9fc0ddc3d9736cfcc7a39cb60dcaea6fe51d234150b34df901c3c66b55bfeff66be4d29ff67ac2a8ad511bd6ab97404241300090582020000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0})

16:21:26 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcf, 0x0, 0x4)

16:21:26 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:26 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r3, r4, 0x0, 0x1000007ffff000)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100c0, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0)
syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc)
fcntl$dupfd(r1, 0xc0a, 0xffffffffffffffff)
r6 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1cb1, 0x105800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r7, 0x5)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00c\x9e\x8f\xf1\x05\b\x1dA\x96\xa2\a\r+\xb7\xba\x93\xe1\x03\xa2]{\x9a\xbf\xd3\fm$\x15se\xa4~\xff\xe8\xf2\xc9\xf6\xa6\x13\x80f\x8c\xe6\xc1\xecA\x8dd\xf4\xee\x85\xefRh\xeb6\x99\x03\x8fo\xd3\xee\xab\xe4_n\x98S<A\xaa\x96[\x96\xcc\x1e;0k\xe2W!\xb4\x95\xe3\xe1\xc55\x9b\xea\xeeb\x0f`\x1dJ?h\xf1\xe61\xe0by0\xd0\xb2\x8c\x1d\x16\x91\xa5.{L\xfc')
r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x1, 0x2)
setsockopt$inet6_group_source_req(r9, 0x29, 0x0, 0x0, 0xfffffffffffffe0b)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)

16:21:26 executing program 0:
clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
tkill(r0, 0x13)
rt_sigqueueinfo(r0, 0x2c, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe})

16:21:26 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000)
read(r0, &(0x7f0000000240)=""/204, 0xffffff83)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
close(r0)

16:21:26 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcf, 0x0, 0x4)

16:21:27 executing program 3:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

16:21:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000280))
getdents64(r0, &(0x7f00000002c0)=""/143, 0x6f94b5fc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1714.093350][T16697] usb 2-1: new high-speed USB device number 125 using dummy_hcd
16:21:27 executing program 5:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
bind$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e)

16:21:27 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x1a0)

[ 1714.363110][T16697] usb 2-1: Using ep0 maxpacket: 16
16:21:27 executing program 3:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

[ 1714.499670][T16697] usb 2-1: config index 0 descriptor too short (expected 5635, got 238)
[ 1714.508230][T16697] usb 2-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config
[ 1714.518644][T16697] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1714.531834][T16697] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1714.541047][T16697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1714.611037][T16697] usb 2-1: selecting invalid altsetting 1
[ 1715.063147][T16697] usb 2-1: selecting invalid altsetting 1
[ 1715.069022][T16697] cdc_ncm 2-1:1.0: bind() failure
[ 1715.250097][T16697] usb 2-1: USB disconnect, device number 125
16:21:28 executing program 5:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
bind$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e)

16:21:28 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x1a0)

16:21:28 executing program 3:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

16:21:28 executing program 2:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

16:21:29 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x400300, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

16:21:29 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b000b2f00fe8000000000000000000d00000000aafe8000000000000000000000000000aa000088be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d9eddb9d122e9eefca65ba303fab12784dfb1cca168f36a9e0e2b49bdea063bbf7ffffffff3121e6c948037374b393cfb46fbc0341eaa8a1ed314de228f75b398f49a5502723a519dedb28f6159a47b32aee8b2beec865ced5c5259e39dcccdc4900939ad404f5d87b42fd3fda1cc457ed0023acb413ee8507225d850def64e9878207fa78781fddaeab3ae0bab39eae3fc9f4cfaf9134c7495c8b3b0932a83564922dff1818dc2cd1e6a8105079e84d0000006100000000"], 0x0)

16:21:29 executing program 2:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

16:21:29 executing program 5:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
bind$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e)

16:21:29 executing program 3:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

16:21:29 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x1a0)

[ 1716.725618][T16697] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
16:21:29 executing program 2:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$revoke(0x3, r2)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

16:21:29 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x1a0)

16:21:29 executing program 3:
unshare(0x20400)
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r0, 0x40084149, &(0x7f0000001f64))

16:21:30 executing program 5:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
bind$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e)

16:21:30 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x400300, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

16:21:30 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b000b2f00fe8000000000000000000d00000000aafe8000000000000000000000000000aa000088be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d9eddb9d122e9eefca65ba303fab12784dfb1cca168f36a9e0e2b49bdea063bbf7ffffffff3121e6c948037374b393cfb46fbc0341eaa8a1ed314de228f75b398f49a5502723a519dedb28f6159a47b32aee8b2beec865ced5c5259e39dcccdc4900939ad404f5d87b42fd3fda1cc457ed0023acb413ee8507225d850def64e9878207fa78781fddaeab3ae0bab39eae3fc9f4cfaf9134c7495c8b3b0932a83564922dff1818dc2cd1e6a8105079e84d0000006100000000"], 0x0)

16:21:30 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x57})

16:21:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

16:21:30 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x400300, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

16:21:30 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
msync(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x4)

16:21:30 executing program 3:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, 0x0)

16:21:30 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b000b2f00fe8000000000000000000d00000000aafe8000000000000000000000000000aa000088be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d9eddb9d122e9eefca65ba303fab12784dfb1cca168f36a9e0e2b49bdea063bbf7ffffffff3121e6c948037374b393cfb46fbc0341eaa8a1ed314de228f75b398f49a5502723a519dedb28f6159a47b32aee8b2beec865ced5c5259e39dcccdc4900939ad404f5d87b42fd3fda1cc457ed0023acb413ee8507225d850def64e9878207fa78781fddaeab3ae0bab39eae3fc9f4cfaf9134c7495c8b3b0932a83564922dff1818dc2cd1e6a8105079e84d0000006100000000"], 0x0)

16:21:30 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x400300, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x2], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

16:21:30 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x57})

16:21:30 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
msync(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x4)

16:21:30 executing program 3:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, 0x0)

16:21:30 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00}\xa4\xc3\xab\xd5 \xf6t\xe1\a0\vA\x15\xebI\xd2@\xa6+\x01\xa3\xac\xfb\xcc\n+\xb9\x7f\xb3,\au\xe8\xffy\xca\xb34c\x8c\x85\x86!\x9b\xa0\xe6\x1f\"\xb5\xb3\xffV\xb7I\xd3\x9e\xee\x82\xf8\xb6\xc0:', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf)

16:21:30 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b000b2f00fe8000000000000000000d00000000aafe8000000000000000000000000000aa000088be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d9eddb9d122e9eefca65ba303fab12784dfb1cca168f36a9e0e2b49bdea063bbf7ffffffff3121e6c948037374b393cfb46fbc0341eaa8a1ed314de228f75b398f49a5502723a519dedb28f6159a47b32aee8b2beec865ced5c5259e39dcccdc4900939ad404f5d87b42fd3fda1cc457ed0023acb413ee8507225d850def64e9878207fa78781fddaeab3ae0bab39eae3fc9f4cfaf9134c7495c8b3b0932a83564922dff1818dc2cd1e6a8105079e84d0000006100000000"], 0x0)

16:21:31 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x57})

16:21:31 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

16:21:31 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
msync(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x4)

16:21:31 executing program 3:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, 0x0)

16:21:31 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000a00)=""/185, 0xb9, 0x0)

16:21:31 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x57})

16:21:31 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00}\xa4\xc3\xab\xd5 \xf6t\xe1\a0\vA\x15\xebI\xd2@\xa6+\x01\xa3\xac\xfb\xcc\n+\xb9\x7f\xb3,\au\xe8\xffy\xca\xb34c\x8c\x85\x86!\x9b\xa0\xe6\x1f\"\xb5\xb3\xffV\xb7I\xd3\x9e\xee\x82\xf8\xb6\xc0:', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf)

16:21:31 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00}\xa4\xc3\xab\xd5 \xf6t\xe1\a0\vA\x15\xebI\xd2@\xa6+\x01\xa3\xac\xfb\xcc\n+\xb9\x7f\xb3,\au\xe8\xffy\xca\xb34c\x8c\x85\x86!\x9b\xa0\xe6\x1f\"\xb5\xb3\xffV\xb7I\xd3\x9e\xee\x82\xf8\xb6\xc0:', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf)

16:21:31 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000a00)=""/185, 0xb9, 0x0)

16:21:31 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
msync(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x4)

16:21:31 executing program 3:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee2, 0x0)

16:21:31 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

16:21:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000001e000507ed0080647e6394f26731d2000900190111404b480f0001000080020000000300f88000f01700", 0x2e}], 0x1}, 0x0)

16:21:32 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='cgroup2\x00}\xa4\xc3\xab\xd5 \xf6t\xe1\a0\vA\x15\xebI\xd2@\xa6+\x01\xa3\xac\xfb\xcc\n+\xb9\x7f\xb3,\au\xe8\xffy\xca\xb34c\x8c\x85\x86!\x9b\xa0\xe6\x1f\"\xb5\xb3\xffV\xb7I\xd3\x9e\xee\x82\xf8\xb6\xc0:', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xf)

16:21:32 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000a00)=""/185, 0xb9, 0x0)

16:21:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002)
write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x4, 0x40000000000004c}], 0xff49)

[ 1719.014725][T21708] netlink: 'syz-executor.4': attribute type 281 has an invalid length.
16:21:32 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d10cc62c"}, 0x0, 0x0, @userptr, 0x4})

16:21:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000001e000507ed0080647e6394f26731d2000900190111404b480f0001000080020000000300f88000f01700", 0x2e}], 0x1}, 0x0)

16:21:32 executing program 0:
syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

16:21:32 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

16:21:32 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000a00)=""/185, 0xb9, 0x0)

16:21:32 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d10cc62c"}, 0x0, 0x0, @userptr, 0x4})

[ 1719.391723][T21763] netlink: 'syz-executor.4': attribute type 281 has an invalid length.
16:21:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000001e000507ed0080647e6394f26731d2000900190111404b480f0001000080020000000300f88000f01700", 0x2e}], 0x1}, 0x0)

16:21:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

16:21:32 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x2b, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

16:21:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002)
write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x4, 0x40000000000004c}], 0xff49)

[ 1719.603237][T11634] usb 1-1: new high-speed USB device number 87 using dummy_hcd
16:21:32 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d10cc62c"}, 0x0, 0x0, @userptr, 0x4})

[ 1719.686901][T21843] netlink: 'syz-executor.4': attribute type 281 has an invalid length.
16:21:32 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000001e000507ed0080647e6394f26731d2000900190111404b480f0001000080020000000300f88000f01700", 0x2e}], 0x1}, 0x0)

[ 1719.842893][T11634] usb 1-1: Using ep0 maxpacket: 16
16:21:32 executing program 2:
unshare(0x20400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x0)

16:21:32 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d10cc62c"}, 0x0, 0x0, @userptr, 0x4})

[ 1719.960317][T21955] netlink: 'syz-executor.4': attribute type 281 has an invalid length.
[ 1719.969566][T11634] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[ 1719.978428][T11634] usb 1-1: config 0 has no interface number 0
[ 1719.984723][T11634] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1719.993925][T11634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1720.093815][T11634] usb 1-1: config 0 descriptor??
[ 1720.353075][T11634] smscufx: Failed to read register index 0x00003000
[ 1720.359800][T11634] smscufx: error -71 reading 0x3000 register from device
[ 1720.360420][T11634] smscufx: probe of 1-1:0.122 failed with error -71
[ 1720.378845][T11634] usb 1-1: USB disconnect, device number 87
[ 1721.102895][T11634] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1721.342941][T11634] usb 1-1: Using ep0 maxpacket: 16
[ 1721.463018][T11634] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[ 1721.471360][T11634] usb 1-1: config 0 has no interface number 0
[ 1721.477704][T11634] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1721.486913][T11634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1721.496564][T11634] usb 1-1: config 0 descriptor??
16:21:34 executing program 0:
syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

16:21:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

16:21:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002)
write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x4, 0x40000000000004c}], 0xff49)

16:21:34 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

16:21:34 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

16:21:34 executing program 2:
unshare(0x20400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x0)

[ 1721.794162][T11634] smscufx: Failed to read register index 0x00003000
[ 1721.801580][T11634] smscufx: error -71 reading 0x3000 register from device
[ 1721.802504][T11634] smscufx: probe of 1-1:0.122 failed with error -71
16:21:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

[ 1721.906821][T11634] usb 1-1: USB disconnect, device number 88
16:21:35 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

16:21:35 executing program 2:
unshare(0x20400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x0)

16:21:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

16:21:35 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

16:21:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002)
write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x4, 0x40000000000004c}], 0xff49)

[ 1722.292880][T11634] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1722.533165][T11634] usb 1-1: Using ep0 maxpacket: 16
[ 1722.653081][T11634] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[ 1722.661442][T11634] usb 1-1: config 0 has no interface number 0
[ 1722.667789][T11634] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1722.677065][T11634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.686729][T11634] usb 1-1: config 0 descriptor??
[ 1722.943162][T11634] smscufx: Failed to read register index 0x00003000
[ 1722.949813][T11634] smscufx: error -71 reading 0x3000 register from device
[ 1722.950458][T11634] smscufx: probe of 1-1:0.122 failed with error -71
[ 1722.970582][T11634] usb 1-1: USB disconnect, device number 89
16:21:36 executing program 2:
unshare(0x20400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x0)

16:21:36 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0xc, 0x2})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000001540)="c0dca5055e0bcfec7be070")
dup2(r1, r0)

16:21:36 executing program 0:
syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

16:21:36 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

16:21:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

16:21:36 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @remote}, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/235, 0x33}], 0x1, 0x5e)

16:21:36 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

16:21:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

16:21:36 executing program 2:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3f000002})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x0, 0x2, 0x3, 'queue0\x00'})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @ioapic={0x0, 0x0, 0x3ff}})
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x401}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r0, 0xc2604110, &(0x7f0000000000))

16:21:36 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="0900000000003639408fa3a3ba2766", 0xf}], 0x4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

16:21:36 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000300)='bridge0\x00h\x00\x01\xd8\x00H\x00')

16:21:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00')
sendfile(r0, r0, 0x0, 0x4)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1, 0xe)

[ 1723.833085][T16697] usb 1-1: new high-speed USB device number 90 using dummy_hcd
16:21:36 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @remote}, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/235, 0x33}], 0x1, 0x5e)

16:21:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/9)

[ 1724.042996][T22513] hugetlbfs: Unknown parameter 'bridge0'
[ 1724.074056][T16697] usb 1-1: Using ep0 maxpacket: 16
[ 1724.194678][T16697] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[ 1724.203457][T16697] usb 1-1: config 0 has no interface number 0
[ 1724.209649][T16697] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1724.218899][T16697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.277567][T16697] usb 1-1: config 0 descriptor??
[ 1724.543139][T16697] smscufx: Failed to read register index 0x00003000
[ 1724.549770][T16697] smscufx: error -71 reading 0x3000 register from device
[ 1724.550322][T16697] smscufx: probe of 1-1:0.122 failed with error -71
[ 1724.568392][T16697] usb 1-1: USB disconnect, device number 90
16:21:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000002800210400"/20, @ANYRES32=r4, @ANYBLOB="0400000000000000000000000c0001006367726f757000005c0002001400020008000100000000000800010000400000440001004019b078b000080001006e6174002c000200280001000000000000000000000000000000000000000000ac1414aaac1414000001000000000000040006000000"], 0x8c}}, 0x0)

16:21:38 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @remote}, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/235, 0x33}], 0x1, 0x5e)

16:21:38 executing program 1:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x802d, 0x23, 0x3})
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r1, r0)

16:21:38 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000300)='bridge0\x00h\x00\x01\xd8\x00H\x00')

16:21:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/9)

16:21:38 executing program 0:
syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1725.108599][T22658] hugetlbfs: Unknown parameter 'bridge0'
16:21:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/9)

16:21:38 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000300)='bridge0\x00h\x00\x01\xd8\x00H\x00')

16:21:38 executing program 1:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x802d, 0x23, 0x3})
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r1, r0)

16:21:38 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @remote}, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/235, 0x33}], 0x1, 0x5e)

[ 1725.373091][T22742] hugetlbfs: Unknown parameter 'bridge0'
[ 1725.393143][T11634] usb 1-1: new high-speed USB device number 91 using dummy_hcd
16:21:38 executing program 5:
r0 = timerfd_create(0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000100))
fcntl$lock(r0, 0x7, &(0x7f00000000c0))
fcntl$lock(r0, 0x24, &(0x7f00000014c0)={0x1})

16:21:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/9)

[ 1725.633020][T11634] usb 1-1: Using ep0 maxpacket: 16
[ 1725.753145][T11634] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[ 1725.761493][T11634] usb 1-1: config 0 has no interface number 0
[ 1725.767917][T11634] usb 1-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1725.777113][T11634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1725.797752][T11634] usb 1-1: config 0 descriptor??
[ 1726.073078][T11634] smscufx: Failed to read register index 0x00003000
[ 1726.079863][T11634] smscufx: error -71 reading 0x3000 register from device
[ 1726.080473][T11634] smscufx: probe of 1-1:0.122 failed with error -71
[ 1726.098694][T11634] usb 1-1: USB disconnect, device number 91
16:21:39 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x8000a0ffffffff, 0x11c9}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

16:21:39 executing program 1:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x802d, 0x23, 0x3})
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r1, r0)

16:21:39 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000300)='bridge0\x00h\x00\x01\xd8\x00H\x00')

16:21:39 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone3(&(0x7f0000000280)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000017c0)=""/145, 0x83, &(0x7f0000000180)=""/207}, 0xffffffe3)

16:21:39 executing program 5:
r0 = timerfd_create(0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000100))
fcntl$lock(r0, 0x7, &(0x7f00000000c0))
fcntl$lock(r0, 0x24, &(0x7f00000014c0)={0x1})

[ 1726.650987][T22896] hugetlbfs: Unknown parameter 'bridge0'
16:21:39 executing program 1:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x802d, 0x23, 0x3})
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r1, r0)

16:21:39 executing program 5:
r0 = timerfd_create(0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000100))
fcntl$lock(r0, 0x7, &(0x7f00000000c0))
fcntl$lock(r0, 0x24, &(0x7f00000014c0)={0x1})

16:21:39 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8)

16:21:39 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

16:21:40 executing program 5:
r0 = timerfd_create(0x0, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000100))
fcntl$lock(r0, 0x7, &(0x7f00000000c0))
fcntl$lock(r0, 0x24, &(0x7f00000014c0)={0x1})

16:21:40 executing program 1:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000337000/0xf000)=nil, 0xf000, 0x1, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0)

16:21:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone3(&(0x7f0000000280)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000017c0)=""/145, 0x83, &(0x7f0000000180)=""/207}, 0xffffffe3)

16:21:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x8000a0ffffffff, 0x11c9}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

16:21:40 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {}, 0x35}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

16:21:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

16:21:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone3(&(0x7f0000000280)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000017c0)=""/145, 0x83, &(0x7f0000000180)=""/207}, 0xffffffe3)

16:21:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

[ 1727.544543][T23474] input: syz1 as /devices/virtual/input/input251
16:21:40 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone3(&(0x7f0000000280)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000017c0)=""/145, 0x83, &(0x7f0000000180)=""/207}, 0xffffffe3)

16:21:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

16:21:40 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

16:21:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x8000a0ffffffff, 0x11c9}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

16:21:41 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

16:21:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

16:21:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

16:21:41 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

16:21:41 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {}, 0x35}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

16:21:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

[ 1728.138228][T23710] input: syz1 as /devices/virtual/input/input253
16:21:41 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x5, 0x8000a0ffffffff, 0x11c9}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

16:21:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

16:21:41 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000180)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000))

16:21:41 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {}, 0x35}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

16:21:41 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e000980020000005e510befccd7", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

16:21:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

[ 1728.525245][T23747] input: syz1 as /devices/virtual/input/input254
16:21:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = epoll_create(0x143)
r3 = socket(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040))
r4 = epoll_create(0x64c49593)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r4, 0x0)

16:21:41 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000011c0)=""/4096)

16:21:41 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x400000000002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {}, 0x35}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

16:21:41 executing program 0:
r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5012, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, {0x0}, 0x0}, 0xa0)

16:21:41 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000180)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000))

16:21:41 executing program 2:
unshare(0x400)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000200)=0xffffffffffffff8c)

[ 1728.905364][T23843] input: syz1 as /devices/virtual/input/input255
16:21:42 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000011c0)=""/4096)

16:21:42 executing program 3:
clone3(0x0, 0x266)

16:21:42 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000180)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000))

16:21:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000240)="0800b5055e0bcfe87b0071")
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1c, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000140)=0x20000048)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x6}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2}, 0x8)

16:21:42 executing program 3:
clone3(0x0, 0x266)

16:21:42 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000011c0)=""/4096)

16:21:42 executing program 2:
unshare(0x400)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000200)=0xffffffffffffff8c)

16:21:42 executing program 0:
r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5012, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, {0x0}, 0x0}, 0xa0)

16:21:42 executing program 4:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000180)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000))

16:21:42 executing program 3:
clone3(0x0, 0x266)

16:21:42 executing program 2:
unshare(0x400)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000200)=0xffffffffffffff8c)

16:21:42 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r0, &(0x7f0000000080), 0xffffffa0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x15)

16:21:42 executing program 0:
r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5012, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, {0x0}, 0x0}, 0xa0)

16:21:42 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000011c0)=""/4096)

16:21:42 executing program 4:
r0 = socket$inet6(0xa, 0x802, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@hoplimit={{0x11, 0x29, 0x4}}], 0x18}}], 0x2, 0x0)

16:21:42 executing program 3:
clone3(0x0, 0x266)

16:21:43 executing program 2:
unshare(0x400)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000200)=0xffffffffffffff8c)

16:21:43 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r0, &(0x7f0000000080), 0xffffffa0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x15)

16:21:43 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1a0010000a4}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

16:21:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
close(r1)

16:21:43 executing program 0:
r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5012, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000240)={@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, {0x0}, 0x0}, 0xa0)

16:21:43 executing program 1:
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0)

16:21:43 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x35315241}})

16:21:43 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r0, &(0x7f0000000080), 0xffffffa0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x15)

16:21:43 executing program 1:
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0)

16:21:43 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1a0010000a4}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

16:21:43 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x3, 0x10, {0x2, 0x0, @multicast2}}, 0x24)

16:21:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
close(r1)

16:21:43 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x35315241}})

16:21:43 executing program 5:
r0 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r0, &(0x7f0000000080), 0xffffffa0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x15)

16:21:43 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1a0010000a4}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

16:21:43 executing program 1:
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0)

16:21:43 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x3, 0x10, {0x2, 0x0, @multicast2}}, 0x24)

16:21:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
close(r1)

16:21:43 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x35315241}})

16:21:44 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x4001000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x49, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90)

16:21:44 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1a0010000a4}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

16:21:44 executing program 1:
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0)

16:21:44 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
close(r1)

16:21:44 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x3, 0x10, {0x2, 0x0, @multicast2}}, 0x24)

16:21:44 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x35315241}})

16:21:44 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x15})

16:21:44 executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
signalfd(r0, &(0x7f0000392ff8), 0x8)
ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

16:21:44 executing program 2:
mmap(&(0x7f0000b7f000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0)

16:21:44 executing program 0:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x3, 0x10, {0x2, 0x0, @multicast2}}, 0x24)

16:21:44 executing program 1:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:44 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x4001000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x49, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90)

16:21:44 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x4001000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x49, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90)

16:21:44 executing program 1:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 2:
mmap(&(0x7f0000b7f000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0)

16:21:45 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x15})

16:21:45 executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
signalfd(r0, &(0x7f0000392ff8), 0x8)
ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

16:21:45 executing program 0:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x4001000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x49, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90)

16:21:45 executing program 1:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 2:
mmap(&(0x7f0000b7f000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0)

16:21:45 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x15})

16:21:45 executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
signalfd(r0, &(0x7f0000392ff8), 0x8)
ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

16:21:45 executing program 0:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 4:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x15})

16:21:45 executing program 5:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 0:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
signalfd(r0, &(0x7f0000392ff8), 0x8)
ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f00000000c0), 0x0, 0x0)

16:21:45 executing program 2:
mmap(&(0x7f0000b7f000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0)

16:21:45 executing program 1:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "7ea4e4a4"}, 0x0, 0x0, @offset, 0x4})
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}})

16:21:45 executing program 5:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

16:21:45 executing program 3:
r0 = socket$inet(0x2, 0x803, 0x85)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x100, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x70f000)

16:21:46 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e0001ff00000000000037916b6b78b3d98f6c9c1af188"], 0x14}}, 0x0)
r0 = socket(0x10, 0x80002, 0x8000000010)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0)

16:21:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="00042bbd7000fcdbdf25060000000c00060004000200040002009c0005000c00020008100200e30600001c00020008000200000000000800030006000000080002000200000008000100696200000800010065746800080001006962000008631d96f9e02e004c0afb466c000200040000003c00020008000300060000008800020005000000080002000500000008000400050000000800030004000000080004000000008008000000000000000800010075647000b400050008000100756470003c00020008000300fdffffff0800030009000000080004000900000008000200f7ffffff08000100010000000800040054000000080002002b9f00001c00020008000100030000000800025f2110000008000100180000001c00020008000200060000000800c0859db70000080001000e00000034000200080002000400000008000200000001000800040004000037523b32201e84fbea172e4a0008000200000000000800040007000000080001000500000039748250b2301710000600040002000800010008000000ad2beb0a82292e7dc9a0d2f3190c3840699a6484d759afce590700d7c46c4a2ee0eb4bcfebad626b15003e4b7146f7f9058fde398b103852bf3fbeac1ad9b5b71056cd376b965311e7f5167c308ae94fb3f13fc08a653cb71162291035501b549c06d2f28e91d48fdaf1391607bbe931a4120a2b3a4c8052d67b321aa703a555a8ddfe2203c0fb6ff9754f5b052be92fec530106bbe40906ac3b417c8ccb183676a5de49e30100eabb763321a0bf0fd37f7aad562201a2a6634743f4c516d98d758f8f3214aa026ad3ed62277707e48d7dd582acc872a9ea84e5151333dde8b02e3f025c25dbbd8ae1808d1bfa929ae32d77b8330c2957c85cdfe981310c299dfc45efe523e039f9ec4576b918037f51996b0d6f6ecaf30aa3e6412737c71a98c671590305c59a53e0073fcdb926ca01df3b6b071651c64c9227b774d5be469aff2a3e201f3cfd40b5cb5b14911bb4d1fbda787ce14dadd3cae227cbdcd587106555a39ce61749df70756472b4344d9be1aa20519da7b4af8aad003220054207a65b4fbd6f67155ec9cfd3a771754011ae92d57e597596ad72bbacfe3b3002db7282d662de26eb63c5c8a096091ddd354b24b60bcb103ce7ede59070361c6128c496ebb8ce765e1c951a13dbe480526b8dacfcb5b35b84911f6c2aad0284b5ba31d024191d89821e3b6927cc7fd5962ad0b3d0cafe1ea35725c3b8f0a5bba69f5f975220bea479ab1e076f06f6d343460bff3bf2a57dce8e"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16:21:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
exit(0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)

16:21:46 executing program 5:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0)
rmdir(&(0x7f0000000180)='./control/file0\x00')

[ 1733.256381][T25204] kvm [25200]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000010f
16:21:46 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "7ea4e4a4"}, 0x0, 0x0, @offset, 0x4})
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}})

16:21:46 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0)

[ 1733.363140][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1733.369434][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1733.375911][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1733.382154][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1733.388730][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1733.395053][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1733.401483][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1733.407815][    C0] protocol 88fb is buggy, dev hsr_slave_1
16:21:46 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "7ea4e4a4"}, 0x0, 0x0, @offset, 0x4})
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}})

16:21:46 executing program 3:
r0 = socket$inet(0x2, 0x803, 0x85)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x100, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x70f000)

16:21:46 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e0001ff00000000000037916b6b78b3d98f6c9c1af188"], 0x14}}, 0x0)
r0 = socket(0x10, 0x80002, 0x8000000010)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0)

16:21:46 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0)

16:21:46 executing program 4:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, "7ea4e4a4"}, 0x0, 0x0, @offset, 0x4})
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, &(0x7f00000000c0)={{0x8}}, 0x5, 0x0}})

16:21:46 executing program 3:
r0 = socket$inet(0x2, 0x803, 0x85)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x100, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x70f000)

16:21:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16:21:46 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e0001ff00000000000037916b6b78b3d98f6c9c1af188"], 0x14}}, 0x0)
r0 = socket(0x10, 0x80002, 0x8000000010)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0)

[ 1734.117710][T25621] kvm [25617]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000010f
16:21:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
exit(0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)

16:21:47 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0)

16:21:47 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x100048}, {0x80000006, 0x0, 0x0, 0xfffffffc}]}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)

16:21:47 executing program 3:
r0 = socket$inet(0x2, 0x803, 0x85)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x100, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x70f000)

16:21:47 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e0001ff00000000000037916b6b78b3d98f6c9c1af188"], 0x14}}, 0x0)
r0 = socket(0x10, 0x80002, 0x8000000010)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
sendmmsg$alg(r0, &(0x7f0000000080), 0x492492492492751, 0x0)

16:21:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16:21:47 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7d, 0x0, [0x0, 0x0, 0xc0000103], [0xc1]})

16:21:47 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, 0x0)

[ 1734.491218][T25734] kvm [25733]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000010f
16:21:47 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x41, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x100a})

16:21:47 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
dup3(r0, r1, 0x0)

16:21:47 executing program 4:
alarm(0xffffefffffff7160)
alarm(0x0)

16:21:47 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x41, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x100a})

16:21:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
exit(0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)

16:21:48 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16:21:48 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x41, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x100a})

16:21:48 executing program 4:
alarm(0xffffefffffff7160)
alarm(0x0)

16:21:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7d, 0x0, [0x0, 0x0, 0xc0000103], [0xc1]})

16:21:48 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
dup3(r0, r1, 0x0)

16:21:48 executing program 4:
alarm(0xffffefffffff7160)
alarm(0x0)

16:21:48 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x41, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x100a})

16:21:48 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
dup3(r0, r1, 0x0)

16:21:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7d, 0x0, [0x0, 0x0, 0xc0000103], [0xc1]})

[ 1735.443148][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1735.449453][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1735.449732][T26072] kvm [26067]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000010f
16:21:48 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fadvise64(r0, 0x0, 0x0, 0x3)

16:21:48 executing program 4:
alarm(0xffffefffffff7160)
alarm(0x0)

16:21:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
exit(0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0)

16:21:49 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
dup3(r0, r1, 0x0)

16:21:49 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7d, 0x0, [0x0, 0x0, 0xc0000103], [0xc1]})

16:21:49 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(r0, 0x10001)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380))
syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7f, 0x400)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

16:21:49 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000)

16:21:49 executing program 2:
syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0)

16:21:49 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000)

16:21:49 executing program 2:
syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0)

16:21:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)

16:21:49 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

16:21:49 executing program 2:
syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0)

16:21:49 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000)

16:21:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

16:21:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)

16:21:50 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000)

16:21:50 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

16:21:50 executing program 2:
syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0xf0ffffffffffff, 0x0, 0x8}}}}}, 0x0)

16:21:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="5300000044a6aeabec2e1d20000000000000001000fff64017db9820000000003b08d403c3f2c876d699010000000000000025da3f0dc7ec8d26560000080000ab31c3a457809d42129d51d0cff13ea7e5b0a29fd05195545608af8cdf6ba435d7dda8d87fbc543098316da5c2225c437080c46f97b2f2e5902c5f5a3e10edf5d82a60e4ae01099d7637784819b95a9fc5e3133df1187fdbfcc2215a0a75edb476aa0516641dc6c5531aa6b9c9b9093c01a5fe75a4452be98ccab43d0dbdaafe5dae4eeeb48dab8e9d836183bb9bdc30e69a0bd8105e9a620a4dbe691736f9a5985accf6d53fb032b3122bcd7e1b48e65907ecc8c69416ed3a390eec4a38b8730a4b30d301fef123913d00cdaa85dfbe8067faf3527ec4a2ee6bc89c37675798dcc69f8033e97c5687c6af8593e455f91ce3b608213a67ed313671a4cc49ac676e56ca4c9273a76cf1f49ab47a7317c9d73f9c10a8f6640b985576cc9dece060e95cc6460b59a1a3f6ae976d971631dde91135a7057b46257ad4b6925b3c"], 0x17e)
syz_open_dev$vbi(0x0, 0x3, 0x2)
syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3619ce9f, 0x2000)
r1 = syz_open_procfs(0x0, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x85cebb956759ee43}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=@del={0x118, 0x11, 0xc, 0x70bd2d, 0x25dfdbfc, {{'sha224-ni\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x285}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x20}, {0x8, 0x1, 0xe9}, {0x8}, {0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x9}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x44044)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0x7, 0x2, 0xfffffffd}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff})
dup(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
socket(0x40000000000010, 0x802, 0x0)

[ 1737.250728][    C1] sd 0:0:1:0: [sg0] tag#5676 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1737.260662][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB: Test Unit Ready
[ 1737.267412][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.277244][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.287101][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.297329][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.307460][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.317385][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.327490][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.337329][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.347466][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.357590][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.367541][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.377403][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.387271][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
16:21:50 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

[ 1737.397218][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1737.407180][    C1] sd 0:0:1:0: [sg0] tag#5676 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
16:21:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4020ae46, &(0x7f0000000080)={0x300})

16:21:50 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b4", 0x2a}], 0x1)

16:21:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)

16:21:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

16:21:50 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b4", 0x2a}], 0x1)

16:21:50 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

16:21:50 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)

16:21:50 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2)
r1 = syz_open_dev$radio(0x0, 0x2, 0x2)
read$alg(r1, &(0x7f0000000180)=""/61, 0x3d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
dup3(r3, r1, 0x0)

16:21:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b4", 0x2a}], 0x1)

16:21:51 executing program 3:
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0)

16:21:51 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KDGETMODE(r0, 0x4004510d, 0x0)

16:21:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4020ae46, &(0x7f0000000080)={0x300})

16:21:51 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b4", 0x2a}], 0x1)

16:21:51 executing program 3:
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0)

16:21:51 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4020ae46, &(0x7f0000000080)={0x300})

16:21:51 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x1100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='.\x9e\xbdL\vSf', 0x0, 0x0)

16:21:51 executing program 3:
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0)

16:21:51 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0x4020ae46, &(0x7f0000000080)={0x300})

16:21:51 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:51 executing program 3:
syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0xffffca88}}}}}, 0x0)

16:21:51 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:52 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x1100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='.\x9e\xbdL\vSf', 0x0, 0x0)

16:21:52 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:52 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:52 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:52 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
shutdown(r0, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x13)

16:21:52 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:52 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x1100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='.\x9e\xbdL\vSf', 0x0, 0x0)

16:21:52 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x9, 0x4)
getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000080))

16:21:52 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:52 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:52 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffeffff)
sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffff4, 0x0, 0x0, 0x2cc)
splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0)

16:21:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
pipe(&(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1)
socket$inet6(0xa, 0x3, 0x100000000000ff)
r3 = socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x20000000010005, 0x2)

16:21:52 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
shutdown(r0, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x13)

16:21:52 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x1100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='.\x9e\xbdL\vSf', 0x0, 0x0)

16:21:52 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:52 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])

16:21:53 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffeffff)
sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffff4, 0x0, 0x0, 0x2cc)
splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0)

16:21:53 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x10001, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10)
write(r0, 0x0, 0x0)

16:21:53 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
shutdown(r0, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x13)

16:21:53 executing program 4:
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r0, 0x0)
umount2(&(0x7f00000001c0)='.\x00', 0x0)

16:21:53 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffeffff)
sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffff4, 0x0, 0x0, 0x2cc)
splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0)

16:21:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

16:21:53 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1)

16:21:53 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
shutdown(r0, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x13)

[ 1740.471106][T27799] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
16:21:53 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffeffff)
sendto$inet(r1, &(0x7f0000000100), 0xfffffffffffffff4, 0x0, 0x0, 0x2cc)
splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0)

16:21:53 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x170}, @sadb_sa={0x2}, @sadb_x_nat_t_type={0x1}]}, 0x30}}, 0x0)
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72)

16:21:53 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup(r1)
getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000080))

16:21:53 executing program 4:
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r0, 0x0)
umount2(&(0x7f00000001c0)='.\x00', 0x0)

16:21:53 executing program 5:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2e0000001c008104e00f80ecdb4cb90402c804a012000000070090fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

16:21:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

16:21:54 executing program 4:
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r0, 0x0)
umount2(&(0x7f00000001c0)='.\x00', 0x0)

16:21:54 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup(r1)
getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000080))

16:21:54 executing program 5:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2e0000001c008104e00f80ecdb4cb90402c804a012000000070090fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

[ 1741.055102][T28202] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
16:21:54 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x170}, @sadb_sa={0x2}, @sadb_x_nat_t_type={0x1}]}, 0x30}}, 0x0)
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72)

16:21:56 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup(r1)
getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000080))

16:21:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

16:21:56 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1)

16:21:56 executing program 5:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2e0000001c008104e00f80ecdb4cb90402c804a012000000070090fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

16:21:56 executing program 4:
unshare(0x200)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r0, 0x0)
umount2(&(0x7f00000001c0)='.\x00', 0x0)

16:21:56 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x170}, @sadb_sa={0x2}, @sadb_x_nat_t_type={0x1}]}, 0x30}}, 0x0)
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72)

16:21:56 executing program 5:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2e0000001c008104e00f80ecdb4cb90402c804a012000000070090fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

[ 1743.531710][T28275] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
16:21:56 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup(r1)
getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000080))

16:21:56 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x200004)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80001d00c0d0)

16:21:56 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x170}, @sadb_sa={0x2}, @sadb_x_nat_t_type={0x1}]}, 0x30}}, 0x0)
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72)

16:21:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

16:21:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xa0001, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:21:56 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

[ 1743.908855][T28294] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma?
16:21:57 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:22:03 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1)

16:22:03 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x41)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="86", 0x2bf}, {&(0x7f00000001c0)="a6", 0xffffffef}], 0x3)

16:22:03 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

16:22:03 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:22:03 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

16:22:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xa0001, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:22:03 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

16:22:03 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x41)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="86", 0x2bf}, {&(0x7f00000001c0)="a6", 0xffffffef}], 0x3)

16:22:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xa0001, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:22:04 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)

16:22:04 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

16:22:04 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:22:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

16:22:10 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1)

16:22:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0xa0001, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:22:10 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x41)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="86", 0x2bf}, {&(0x7f00000001c0)="a6", 0xffffffef}], 0x3)

16:22:10 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:22:10 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:22:10 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

16:22:10 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x41)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="86", 0x2bf}, {&(0x7f00000001c0)="a6", 0xffffffef}], 0x3)

16:22:10 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:10 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:22:10 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "76608c", 0x10, 0x0, 0x0, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "b19ade"}}}}}}}, 0x0)

16:22:10 executing program 3:
accept(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x21)
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300))
close(r0)

16:22:10 executing program 4:
r0 = syz_open_dev$admmidi(0x0, 0x7744, 0x24040)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, 0x0)
socket(0x9, 0x3, 0x0)
getsockopt(0xffffffffffffffff, 0x800000010f, 0x89, 0x0, &(0x7f0000a3c000))
sysinfo(&(0x7f0000000000)=""/22)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
r2 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags})
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000), 0x20a154cc)

16:22:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:16 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:22:16 executing program 3:
accept(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x21)
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300))
close(r0)

16:22:16 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40020, &(0x7f0000000900)=ANY=[@ANYBLOB=',uid='])

16:22:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x18}}], 0x2, 0x0)

[ 1763.386194][T29401] devpts: called with bogus options
16:22:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:16 executing program 3:
accept(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x21)
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300))
close(r0)

16:22:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:16 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40020, &(0x7f0000000900)=ANY=[@ANYBLOB=',uid='])

16:22:16 executing program 3:
accept(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x21)
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300))
close(r0)

16:22:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

[ 1763.811464][T29521] devpts: called with bogus options
16:22:16 executing program 3:
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f0000000180)={&(0x7f0000000280)={'sha3-256\x00'}})

16:22:17 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

16:22:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x85, {0x85, 0x0, "5348113e75e6e44290520fedf92a498ed932e927efe8151030b27b967b893955a732b072030fa7a5c882c6d28f71575cec69c2821ddbece730f9d48c70b2a4edd55302c387626b8fc39da0d15481bd7ef67d2129c12b598d576fbf0ac4df31476e9c443d2e806d8ab0dc63ddb6f41a67c6219cbecacf8d7c966e73061f8c28b48da39b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

16:22:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 1764.553141][T11634] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1764.792840][T11634] usb 6-1: Using ep0 maxpacket: 8
[ 1764.912912][T11634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1764.924066][T11634] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1764.937192][T11634] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00
[ 1764.946607][T11634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1764.956326][T11634] usb 6-1: config 0 descriptor??
[ 1765.433834][T11634] hid (null): report_id 0 is invalid
[ 1765.439255][T11634] hid (null): unknown global tag 0xe
[ 1765.448258][T11634] hid-generic 0003:1E5E:0313.0081: report_id 0 is invalid
[ 1765.455703][T11634] hid-generic 0003:1E5E:0313.0081: item 0 1 1 8 parsing failed
[ 1765.463944][T11634] hid-generic: probe of 0003:1E5E:0313.0081 failed with error -22
[ 1765.636355][T11634] usb 6-1: USB disconnect, device number 120
[ 1766.402915][T11634] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1766.644640][T11634] usb 6-1: Using ep0 maxpacket: 8
[ 1766.763027][T11634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1766.774378][T11634] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1766.787642][T11634] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00
[ 1766.796937][T11634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.807026][T11634] usb 6-1: config 0 descriptor??
[ 1767.163018][T11634] usbhid 6-1:0.0: can't add hid device: -71
[ 1767.169088][T11634] usbhid: probe of 6-1:0.0 failed with error -71
[ 1767.182012][T11634] usb 6-1: USB disconnect, device number 121
16:22:23 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0)

16:22:23 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40020, &(0x7f0000000900)=ANY=[@ANYBLOB=',uid='])

16:22:23 executing program 3:
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f0000000180)={&(0x7f0000000280)={'sha3-256\x00'}})

16:22:23 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

16:22:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

16:22:23 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x85, {0x85, 0x0, "5348113e75e6e44290520fedf92a498ed932e927efe8151030b27b967b893955a732b072030fa7a5c882c6d28f71575cec69c2821ddbece730f9d48c70b2a4edd55302c387626b8fc39da0d15481bd7ef67d2129c12b598d576fbf0ac4df31476e9c443d2e806d8ab0dc63ddb6f41a67c6219cbecacf8d7c966e73061f8c28b48da39b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1770.591229][T29756] devpts: called with bogus options
16:22:23 executing program 3:
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f0000000180)={&(0x7f0000000280)={'sha3-256\x00'}})

16:22:23 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40020, &(0x7f0000000900)=ANY=[@ANYBLOB=',uid='])

16:22:23 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

16:22:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

[ 1770.833654][T29773] devpts: called with bogus options
16:22:23 executing program 3:
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f0000000180)={&(0x7f0000000280)={'sha3-256\x00'}})

[ 1770.883221][T16697] usb 6-1: new high-speed USB device number 122 using dummy_hcd
16:22:24 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

[ 1771.123268][T16697] usb 6-1: Using ep0 maxpacket: 8
[ 1771.243090][T16697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1771.254285][T16697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1771.267417][T16697] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00
[ 1771.276616][T16697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1771.286619][T16697] usb 6-1: config 0 descriptor??
[ 1771.773758][T16697] hid (null): report_id 0 is invalid
[ 1771.779137][T16697] hid (null): unknown global tag 0xe
[ 1771.787752][T16697] hid-generic 0003:1E5E:0313.0082: report_id 0 is invalid
[ 1771.795161][T16697] hid-generic 0003:1E5E:0313.0082: item 0 1 1 8 parsing failed
[ 1771.803399][T16697] hid-generic: probe of 0003:1E5E:0313.0082 failed with error -22
[ 1771.981197][T16697] usb 6-1: USB disconnect, device number 122
16:22:30 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff})
readv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x20000000000002ca)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

16:22:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2})
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0x0, 0x0})

16:22:30 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070")
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x3}}, 0x2e)
ioctl$PPPIOCGFLAGS(r3, 0x80487436, 0x0)

16:22:30 executing program 3:
unshare(0x400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0)

16:22:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0)

16:22:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x85, {0x85, 0x0, "5348113e75e6e44290520fedf92a498ed932e927efe8151030b27b967b893955a732b072030fa7a5c882c6d28f71575cec69c2821ddbece730f9d48c70b2a4edd55302c387626b8fc39da0d15481bd7ef67d2129c12b598d576fbf0ac4df31476e9c443d2e806d8ab0dc63ddb6f41a67c6219cbecacf8d7c966e73061f8c28b48da39b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1777.878059][T29791] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 1777.886516][T29791] netlink: 'syz-executor.2': attribute type 14 has an invalid length.
16:22:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0)

16:22:31 executing program 0:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x928, 0x0)

[ 1778.104358][T29979] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 1778.112773][T29979] netlink: 'syz-executor.2': attribute type 14 has an invalid length.
[ 1778.133188][T11634] usb 6-1: new high-speed USB device number 123 using dummy_hcd
16:22:31 executing program 3:
unshare(0x400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0)

16:22:31 executing program 0:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x928, 0x0)

16:22:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0)

16:22:31 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070")
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x3}}, 0x2e)
ioctl$PPPIOCGFLAGS(r3, 0x80487436, 0x0)

[ 1778.330450][T30019] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 1778.338944][T30019] netlink: 'syz-executor.2': attribute type 14 has an invalid length.
[ 1778.374081][T11634] usb 6-1: Using ep0 maxpacket: 8
[ 1778.494403][T11634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1778.505619][T11634] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1778.518889][T11634] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00
[ 1778.528265][T11634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.544356][T11634] usb 6-1: config 0 descriptor??
[ 1779.023885][T11634] hid (null): report_id 0 is invalid
[ 1779.029439][T11634] hid (null): unknown global tag 0xe
[ 1779.039455][T11634] hid-generic 0003:1E5E:0313.0083: report_id 0 is invalid
[ 1779.047037][T11634] hid-generic 0003:1E5E:0313.0083: item 0 1 1 8 parsing failed
[ 1779.055338][T11634] hid-generic: probe of 0003:1E5E:0313.0083 failed with error -22
[ 1779.231176][T11634] usb 6-1: USB disconnect, device number 123
16:22:38 executing program 1:
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0x93ffffff)

16:22:38 executing program 3:
unshare(0x400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0)

16:22:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0)

16:22:38 executing program 0:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x928, 0x0)

16:22:38 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070")
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x3}}, 0x2e)
ioctl$PPPIOCGFLAGS(r3, 0x80487436, 0x0)

16:22:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x85, {0x85, 0x0, "5348113e75e6e44290520fedf92a498ed932e927efe8151030b27b967b893955a732b072030fa7a5c882c6d28f71575cec69c2821ddbece730f9d48c70b2a4edd55302c387626b8fc39da0d15481bd7ef67d2129c12b598d576fbf0ac4df31476e9c443d2e806d8ab0dc63ddb6f41a67c6219cbecacf8d7c966e73061f8c28b48da39b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

[ 1785.097374][T30039] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 1785.105862][T30039] netlink: 'syz-executor.2': attribute type 14 has an invalid length.
16:22:38 executing program 0:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x928, 0x0)

16:22:38 executing program 3:
unshare(0x400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0)

16:22:38 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070")
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x3}}, 0x2e)
ioctl$PPPIOCGFLAGS(r3, 0x80487436, 0x0)

16:22:38 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)

[ 1785.333259][T11634] usb 6-1: new high-speed USB device number 124 using dummy_hcd
16:22:38 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self\x00', 0x0, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x0)

16:22:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

[ 1785.573226][T11634] usb 6-1: Using ep0 maxpacket: 8
[ 1785.693120][T11634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1785.704536][T11634] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1785.717570][T11634] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00
[ 1785.726814][T11634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1785.748246][T11634] usb 6-1: config 0 descriptor??
[ 1786.234171][T11634] hid (null): report_id 0 is invalid
[ 1786.239605][T11634] hid (null): unknown global tag 0xe
[ 1786.248123][T11634] hid-generic 0003:1E5E:0313.0084: report_id 0 is invalid
[ 1786.255528][T11634] hid-generic 0003:1E5E:0313.0084: item 0 1 1 8 parsing failed
[ 1786.263797][T11634] hid-generic: probe of 0003:1E5E:0313.0084 failed with error -22
[ 1786.442596][T11634] usb 6-1: USB disconnect, device number 124
16:22:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0)

16:22:44 executing program 1:
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0x93ffffff)

16:22:44 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self\x00', 0x0, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x0)

16:22:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)

16:22:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0)

[ 1791.284175][T30293] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
[ 1791.293741][T30293] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
16:22:44 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self\x00', 0x0, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x0)

16:22:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)

16:22:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:44 executing program 0:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/self\x00', 0x0, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80}, 0x0)

16:22:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)

16:22:44 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0)

16:22:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0)

[ 1797.604404][T30571] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
16:22:51 executing program 1:
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0x93ffffff)

16:22:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

16:22:51 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

16:22:51 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000140)=[{{}, 0x1, 0x38, 0x400000002}], 0x3f9)

16:22:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0)

16:22:51 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0)

16:22:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0)

16:22:51 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0)

16:22:51 executing program 3:
r0 = socket(0x42000000015, 0x805, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x4000000)

16:22:51 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000140)=[{{}, 0x1, 0x38, 0x400000002}], 0x3f9)

16:22:52 executing program 3:
r0 = socket(0x42000000015, 0x805, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x4000000)

16:22:52 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

16:22:57 executing program 1:
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0x93ffffff)

16:22:57 executing program 4:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

16:22:57 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff})
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ppoll(&(0x7f0000000440)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16:22:57 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000140)=[{{}, 0x1, 0x38, 0x400000002}], 0x3f9)

16:22:57 executing program 3:
r0 = socket(0x42000000015, 0x805, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x4000000)

16:22:57 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

[ 1804.804271][T30718] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
16:22:58 executing program 2:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

16:22:58 executing program 3:
r0 = socket(0x42000000015, 0x805, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x4000000)

16:22:58 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x20, 0x2)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000140)=[{{}, 0x1, 0x38, 0x400000002}], 0x3f9)

16:22:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

16:22:58 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000000)=0xffffff96)

16:22:58 executing program 5:
open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

[ 1805.255580][T30844] net_ratelimit: 6 callbacks suppressed
[ 1805.255608][T30844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1811.124227][T31155] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
16:23:05 executing program 5:
open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

16:23:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xe}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:23:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

16:23:05 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000000)=0xffffff96)

16:23:05 executing program 4:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

16:23:05 executing program 1:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="f3f000e3ee70", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0xffffff82, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0)

[ 1812.124925][T31165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
16:23:05 executing program 5:
open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

16:23:05 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000000)=0xffffff96)

16:23:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

16:23:05 executing program 5:
open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

16:23:05 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000000)=0xffffff96)

[ 1812.434340][T31277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
16:23:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xe}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:23:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

16:23:05 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

16:23:05 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

[ 1812.717566][T31290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
16:23:05 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xe}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:23:06 executing program 4:
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x800000000000000}, 0x1b, &(0x7f0000000240), 0x36a, &(0x7f0000000680)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd3bb, &(0x7f0000000000), 0x259, &(0x7f0000001880)=""/183, 0x408}, 0x0)

16:23:11 executing program 1:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="f3f000e3ee70", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0xffffff82, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0)

16:23:11 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

16:23:11 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

16:23:11 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800030800000000a9030000000000800000000808000100575a78b8fb6dbc86b119ff9fefeb0144abbbb00194819c7fdd68561939066d75013cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7e08e8af562834753ed172a98aefa3d02dc38718d516eab35d647da08e2362952f0da0a45b8cb7854b62e48fb72147ef0000900df6b6ab6b70700000000000085ceb88a223c0ec0e5afecdc3c9697241241c9edf5cc5ec028f387e075046d8df0845035225409e67caca1b197464ffe69a00100000001000000a8e5ee9f1f9545267f17137b9dedf5330db5e9519600"/255, @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

16:23:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xe}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:23:11 executing program 4:
rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000040)="c4437d399ffeefffffff0f01d9c462cd019ea6000000416a24470fd448d3440f0f44dbd2bf40eff3470f58f6f044810709000000672666430f1ee3", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stat\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0)

16:23:11 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

16:23:11 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

16:23:11 executing program 4:
rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000040)="c4437d399ffeefffffff0f01d9c462cd019ea6000000416a24470fd448d3440f0f44dbd2bf40eff3470f58f6f044810709000000672666430f1ee3", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stat\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0)

16:23:11 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800030800000000a9030000000000800000000808000100575a78b8fb6dbc86b119ff9fefeb0144abbbb00194819c7fdd68561939066d75013cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7e08e8af562834753ed172a98aefa3d02dc38718d516eab35d647da08e2362952f0da0a45b8cb7854b62e48fb72147ef0000900df6b6ab6b70700000000000085ceb88a223c0ec0e5afecdc3c9697241241c9edf5cc5ec028f387e075046d8df0845035225409e67caca1b197464ffe69a00100000001000000a8e5ee9f1f9545267f17137b9dedf5330db5e9519600"/255, @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

16:23:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20400)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000080))

16:23:11 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

16:23:18 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60)

16:23:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20400)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000080))

16:23:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

16:23:18 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800030800000000a9030000000000800000000808000100575a78b8fb6dbc86b119ff9fefeb0144abbbb00194819c7fdd68561939066d75013cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7e08e8af562834753ed172a98aefa3d02dc38718d516eab35d647da08e2362952f0da0a45b8cb7854b62e48fb72147ef0000900df6b6ab6b70700000000000085ceb88a223c0ec0e5afecdc3c9697241241c9edf5cc5ec028f387e075046d8df0845035225409e67caca1b197464ffe69a00100000001000000a8e5ee9f1f9545267f17137b9dedf5330db5e9519600"/255, @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

16:23:18 executing program 1:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="f3f000e3ee70", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0xffffff82, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0)

16:23:18 executing program 4:
rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000040)="c4437d399ffeefffffff0f01d9c462cd019ea6000000416a24470fd448d3440f0f44dbd2bf40eff3470f58f6f044810709000000672666430f1ee3", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stat\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0)

16:23:18 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20400)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000080))

16:23:18 executing program 4:
rt_sigaction(0x40, &(0x7f0000000080)={&(0x7f0000000040)="c4437d399ffeefffffff0f01d9c462cd019ea6000000416a24470fd448d3440f0f44dbd2bf40eff3470f58f6f044810709000000672666430f1ee3", {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000000c0))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stat\x00')
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x0)

16:23:18 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800030800000000a9030000000000800000000808000100575a78b8fb6dbc86b119ff9fefeb0144abbbb00194819c7fdd68561939066d75013cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7e08e8af562834753ed172a98aefa3d02dc38718d516eab35d647da08e2362952f0da0a45b8cb7854b62e48fb72147ef0000900df6b6ab6b70700000000000085ceb88a223c0ec0e5afecdc3c9697241241c9edf5cc5ec028f387e075046d8df0845035225409e67caca1b197464ffe69a00100000001000000a8e5ee9f1f9545267f17137b9dedf5330db5e9519600"/255, @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

16:23:18 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})

16:23:18 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60)

16:23:19 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

16:23:25 executing program 1:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="f3f000e3ee70", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2, {[], @icmpv6=@time_exceed={0xffffff82, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0)

16:23:25 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00')
fchdir(r0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="a4ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5", 0x53}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x21)
ptrace$cont(0x18, r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80a, 0x0)
r3 = socket$inet(0x2, 0x80a, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
creat(&(0x7f0000000280)='./bus\x00', 0x0)
ptrace$cont(0x7, r1, 0x0, 0x0)

16:23:25 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})

16:23:25 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20400)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000080))

16:23:25 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60)

16:23:25 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

[ 1832.771925][T31797] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
16:23:25 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})

16:23:25 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60)

16:23:25 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

16:23:26 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}})

16:23:26 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

16:23:26 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})

16:23:32 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

16:23:32 executing program 3:
r0 = gettid()
ioprio_set$pid(0x2, r0, 0x0)

16:23:32 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

16:23:32 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}})

16:23:32 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

16:23:32 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x8000000})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x8, 0x1})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000540)={'broute\x00'}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x4b1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:23:32 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

16:23:32 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}})

16:23:32 executing program 3:
r0 = gettid()
ioprio_set$pid(0x2, r0, 0x0)

16:23:32 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
pread64(r0, &(0x7f0000000000)=""/57, 0x39, 0x0)

16:23:32 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

16:23:32 executing program 3:
r0 = gettid()
ioprio_set$pid(0x2, r0, 0x0)

16:23:32 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}})

16:23:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0x160, 0x0, 0x0, [{{}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}, {{0x0, 0x0, 0x0, 0xd55d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}]}, 0x160)

16:23:32 executing program 5:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/576]}, 0x2b8)

16:23:32 executing program 3:
r0 = gettid()
ioprio_set$pid(0x2, r0, 0x0)

16:23:32 executing program 0:
unshare(0x400)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000000000)='\f'}, 0x20)

16:23:39 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, &(0x7f0000000140)='cpuset\x00')

16:23:39 executing program 1:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10)
connect(r3, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="f3030000000000000000001b"], 0xc)
recvmsg(r3, &(0x7f0000000140)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, 0x0}, 0x0)

16:23:39 executing program 3:
futex(&(0x7f0000000080), 0x800000000005, 0x0, 0x0, &(0x7f0000000000), 0x84ffffff)

16:23:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, 0x8)

16:23:39 executing program 0:
unshare(0x400)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000000000)='\f'}, 0x20)

16:23:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0x160, 0x0, 0x0, [{{}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}, {{0x0, 0x0, 0x0, 0xd55d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}]}, 0x160)

[ 1846.260975][T32285] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program
[ 1846.306294][T32285] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program
16:23:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, 0x8)

16:23:39 executing program 3:
futex(&(0x7f0000000080), 0x800000000005, 0x0, 0x0, &(0x7f0000000000), 0x84ffffff)

16:23:39 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, &(0x7f0000000140)='cpuset\x00')

16:23:39 executing program 0:
unshare(0x400)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000000000)='\f'}, 0x20)

[ 1846.535878][T32405] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program
16:23:39 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, 0x8)

16:23:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0x160, 0x0, 0x0, [{{}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}, {{0x0, 0x0, 0x0, 0xd55d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}]}, 0x160)

16:23:39 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, &(0x7f0000000140)='cpuset\x00')

16:23:46 executing program 1:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280))
setgid(0x0)

16:23:46 executing program 3:
futex(&(0x7f0000000080), 0x800000000005, 0x0, 0x0, &(0x7f0000000000), 0x84ffffff)

16:23:46 executing program 0:
unshare(0x400)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000000000)='\f'}, 0x20)

16:23:46 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, 0x8)

16:23:46 executing program 5:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, &(0x7f0000000140)='cpuset\x00')

16:23:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)={0x160, 0x0, 0x0, [{{}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}, {{0x0, 0x0, 0x0, 0xd55d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, {0x0, 0x0, 0xb, 0x0, '/dev/midi#\x00'}}]}, 0x160)

[ 1853.478338][T32539] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program
16:23:46 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc008240a, &(0x7f0000000000)=0x1)

16:23:46 executing program 3:
futex(&(0x7f0000000080), 0x800000000005, 0x0, 0x0, &(0x7f0000000000), 0x84ffffff)

16:23:46 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x488, 0x1000011e57ed0]})

16:23:46 executing program 2:
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'s\x97y', 0x1}, &(0x7f0000000600)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743ab3f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000bfe7c002d209", 0xfd28, r0)

[ 1853.753626][T32642] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program
16:23:46 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$sock_int(r0, 0x1, 0x44, &(0x7f0000000040), 0x4)

16:23:47 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a056a00400000000001090224000100000000090400000603010000092100000001220600090581030000000000ddbe8afb9245079cb97a9bcc83eebead67e11920eceb8fd6f019f66105eb0110c1a752a7e777b267c070aa2a03a370fa92d7ec339c37e826389b8d07c13c3e266e082dc9496ae067621b69b36f206ab126de4190f85476fb89b11a23afd93351bdcea95c333adc5d76fe5dab900d20ffd9e053590f3e8a58592b4cb1487e64ab3588664f57715b8e98d270594b18418a9f16efba4b2709f74e1e73b402ac5fc75ad931d1b4f9ca137578"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xffffffffffffffa8, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "32b15adf"}, @global=@item_012={0xfffffffffffffdac, 0x1, 0x7}]}}, 0x0}, 0x0)

[ 1854.372781][T11637] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1854.732871][T11637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1854.743989][T11637] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1854.757192][T11637] usb 5-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40
[ 1854.766435][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.776123][T11637] usb 5-1: config 0 descriptor??
[ 1855.261956][T11637] wacom 0003:056A:006A.0085: Unknown device_type for 'HID 056a:006a'. Assuming pen.
[ 1855.273563][T11637] input: Wacom Bamboo1 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:006A.0085/input/input256
[ 1855.292598][T11637] wacom 0003:056A:006A.0085: hidraw0: USB HID v0.00 Device [HID 056a:006a] on usb-dummy_hcd.4-1/input0
[ 1855.489635][T11637] usb 5-1: USB disconnect, device number 47
[ 1856.262764][T11637] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1856.622875][T11637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1856.634324][T11637] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1856.647398][T11637] usb 5-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40
[ 1856.656679][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1856.666373][T11637] usb 5-1: config 0 descriptor??
[ 1857.023038][T11637] usbhid 5-1:0.0: can't add hid device: -71
[ 1857.029265][T11637] usbhid: probe of 5-1:0.0 failed with error -71
[ 1857.040147][T11637] usb 5-1: USB disconnect, device number 48
16:23:53 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000003c0)={0x2000000040})

16:23:53 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc008240a, &(0x7f0000000000)=0x1)

16:23:53 executing program 2:
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'s\x97y', 0x1}, &(0x7f0000000600)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743ab3f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000bfe7c002d209", 0xfd28, r0)

16:23:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x488, 0x1000011e57ed0]})

16:23:53 executing program 3:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:23:53 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a056a00400000000001090224000100000000090400000603010000092100000001220600090581030000000000ddbe8afb9245079cb97a9bcc83eebead67e11920eceb8fd6f019f66105eb0110c1a752a7e777b267c070aa2a03a370fa92d7ec339c37e826389b8d07c13c3e266e082dc9496ae067621b69b36f206ab126de4190f85476fb89b11a23afd93351bdcea95c333adc5d76fe5dab900d20ffd9e053590f3e8a58592b4cb1487e64ab3588664f57715b8e98d270594b18418a9f16efba4b2709f74e1e73b402ac5fc75ad931d1b4f9ca137578"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xffffffffffffffa8, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "32b15adf"}, @global=@item_012={0xfffffffffffffdac, 0x1, 0x7}]}}, 0x0}, 0x0)

16:23:53 executing program 2:
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'s\x97y', 0x1}, &(0x7f0000000600)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743ab3f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000bfe7c002d209", 0xfd28, r0)

16:23:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x488, 0x1000011e57ed0]})

16:23:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc008240a, &(0x7f0000000000)=0x1)

16:23:54 executing program 3:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

[ 1861.023224][T11637] usb 5-1: new high-speed USB device number 49 using dummy_hcd
16:23:54 executing program 2:
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'s\x97y', 0x1}, &(0x7f0000000600)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743ab3f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000bfe7c002d209", 0xfd28, r0)

16:23:54 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc008240a, &(0x7f0000000000)=0x1)

[ 1861.393328][T11637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1861.404371][T11637] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1861.417539][T11637] usb 5-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40
[ 1861.426725][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1861.436813][T11637] usb 5-1: config 0 descriptor??
[ 1861.917431][T11637] wacom 0003:056A:006A.0086: Unknown device_type for 'HID 056a:006a'. Assuming pen.
[ 1861.928786][T11637] input: Wacom Bamboo1 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:006A.0086/input/input259
[ 1861.972289][T11637] wacom 0003:056A:006A.0086: hidraw0: USB HID v0.00 Device [HID 056a:006a] on usb-dummy_hcd.4-1/input0
[ 1862.164927][T11637] usb 5-1: USB disconnect, device number 49
16:24:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x1000000002714, 0x0, &(0x7f00000000c0))

16:24:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x488, 0x1000011e57ed0]})

16:24:01 executing program 3:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:24:01 executing program 2:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:24:01 executing program 5:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:24:01 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a056a00400000000001090224000100000000090400000603010000092100000001220600090581030000000000ddbe8afb9245079cb97a9bcc83eebead67e11920eceb8fd6f019f66105eb0110c1a752a7e777b267c070aa2a03a370fa92d7ec339c37e826389b8d07c13c3e266e082dc9496ae067621b69b36f206ab126de4190f85476fb89b11a23afd93351bdcea95c333adc5d76fe5dab900d20ffd9e053590f3e8a58592b4cb1487e64ab3588664f57715b8e98d270594b18418a9f16efba4b2709f74e1e73b402ac5fc75ad931d1b4f9ca137578"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xffffffffffffffa8, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "32b15adf"}, @global=@item_012={0xfffffffffffffdac, 0x1, 0x7}]}}, 0x0}, 0x0)

16:24:01 executing program 3:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:24:01 executing program 2:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:24:01 executing program 5:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

16:24:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f000033bffc))

16:24:01 executing program 2:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

[ 1868.307298][T11637] usb 5-1: new high-speed USB device number 50 using dummy_hcd
16:24:01 executing program 5:
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)

[ 1868.673443][T11637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1868.684509][T11637] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1868.697500][T11637] usb 5-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40
[ 1868.706683][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1868.716559][T11637] usb 5-1: config 0 descriptor??
[ 1869.181881][T11637] wacom 0003:056A:006A.0087: Unknown device_type for 'HID 056a:006a'. Assuming pen.
[ 1869.193497][T11637] input: Wacom Bamboo1 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:006A.0087/input/input262
[ 1869.213139][T11637] wacom 0003:056A:006A.0087: hidraw0: USB HID v0.00 Device [HID 056a:006a] on usb-dummy_hcd.4-1/input0
[ 1869.416617][T11637] usb 5-1: USB disconnect, device number 50
16:24:08 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff0e, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

16:24:08 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000001340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x2}, {}, {0x0, '\x00', 0x1}]}, 0x108)

16:24:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f000033bffc))

16:24:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:24:08 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0)

16:24:08 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a056a00400000000001090224000100000000090400000603010000092100000001220600090581030000000000ddbe8afb9245079cb97a9bcc83eebead67e11920eceb8fd6f019f66105eb0110c1a752a7e777b267c070aa2a03a370fa92d7ec339c37e826389b8d07c13c3e266e082dc9496ae067621b69b36f206ab126de4190f85476fb89b11a23afd93351bdcea95c333adc5d76fe5dab900d20ffd9e053590f3e8a58592b4cb1487e64ab3588664f57715b8e98d270594b18418a9f16efba4b2709f74e1e73b402ac5fc75ad931d1b4f9ca137578"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xffffffffffffffa8, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "32b15adf"}, @global=@item_012={0xfffffffffffffdac, 0x1, 0x7}]}}, 0x0}, 0x0)

16:24:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f000033bffc))

16:24:08 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000001340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x2}, {}, {0x0, '\x00', 0x1}]}, 0x108)

16:24:08 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0)

16:24:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f000033bffc))

16:24:08 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000001340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x2}, {}, {0x0, '\x00', 0x1}]}, 0x108)

[ 1875.542880][T11637] usb 5-1: new high-speed USB device number 51 using dummy_hcd
16:24:08 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0)

[ 1875.903151][T11637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1875.914326][T11637] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1875.927483][T11637] usb 5-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.40
[ 1875.936788][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1875.947091][T11637] usb 5-1: config 0 descriptor??
[ 1876.432174][T11637] wacom 0003:056A:006A.0088: Unknown device_type for 'HID 056a:006a'. Assuming pen.
[ 1876.443700][T11637] input: Wacom Bamboo1 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:006A.0088/input/input265
[ 1876.462270][T11637] wacom 0003:056A:006A.0088: hidraw0: USB HID v0.00 Device [HID 056a:006a] on usb-dummy_hcd.4-1/input0
[ 1876.666220][T11637] usb 5-1: USB disconnect, device number 51
16:24:14 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff0e, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

16:24:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5})

16:24:14 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0)

16:24:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5c0bcfe47bf070")
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280))
r3 = gettid()
r4 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000140)={r2, r0})

16:24:14 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000000000000, 0x80, &(0x7f0000001340)=@nat={'nat\x1d\xff\x00?\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\\\x8f\x02\x00\x00\x00\x00\x00\x007\x00', 0x19, 0x1, 0x90, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x2}, {}, {0x0, '\x00', 0x1}]}, 0x108)

16:24:14 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf9, 0x70, 0x1c, 0x8, 0xbda, 0x818c, 0x298f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0)

16:24:14 executing program 5:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

16:24:14 executing program 3:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xc1, 0xd0, 0x10, 0x763, 0x1011, 0x79ae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x3, 0xff, 0x9a, 0x8d, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0)

16:24:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5c0bcfe47bf070")
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280))
r3 = gettid()
r4 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000140)={r2, r0})

[ 1881.864557][T11637] usb 5-1: new low-speed USB device number 52 using dummy_hcd
16:24:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5})

16:24:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5c0bcfe47bf070")
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280))
r3 = gettid()
r4 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000140)={r2, r0})

16:24:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5})

[ 1882.103388][T11634] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1882.143501][T11639] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1882.223104][T11637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt
[ 1882.233432][T11637] usb 5-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=29.8f
[ 1882.242570][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1882.254879][T11637] usb 5-1: config 0 descriptor??
[ 1882.295895][T11637] usb 5-1: This Realtek USB WiFi dongle (0x0bda:0x818c) is untested!
[ 1882.304711][T11637] usb 5-1: Please report results to Jes.Sorensen@gmail.com
[ 1882.372993][T11634] usb 4-1: Using ep0 maxpacket: 16
[ 1882.382947][T11639] usb 6-1: Using ep0 maxpacket: 16
[ 1882.493049][T11634] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[ 1882.501454][T11634] usb 4-1: config 0 has no interface number 0
[ 1882.507920][T11634] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1882.519139][T11634] usb 4-1: config 0 interface 130 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1882.529320][T11634] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=79.ae
[ 1882.538715][T11634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1882.547818][T11639] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1882.557032][T11639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1882.568607][T11639] usb 6-1: config 0 descriptor??
[ 1882.575089][T11634] usb 4-1: config 0 descriptor??
[ 1882.623008][T11634] snd-usb-audio: probe of 4-1:0.130 failed with error -12
[ 1882.633001][T11637] usb 5-1: Unsupported USB TX end-points
[ 1882.638803][T11637] usb 5-1: Fatal - failed to identify chip
[ 1882.645219][T11637] rtl8xxxu: probe of 5-1:0.0 failed with error -524
[ 1882.669245][T11637] usb 5-1: USB disconnect, device number 52
[ 1882.817920][T11634] usb 4-1: USB disconnect, device number 23
[ 1883.334286][T11634] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[ 1883.593016][T11637] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1883.693343][T11634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt
[ 1883.703633][T11634] usb 5-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=29.8f
[ 1883.712979][T11634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1883.722901][T11634] usb 5-1: config 0 descriptor??
[ 1883.764514][T11634] usb 5-1: This Realtek USB WiFi dongle (0x0bda:0x818c) is untested!
[ 1883.773051][T11634] usb 5-1: Please report results to Jes.Sorensen@gmail.com
[ 1883.833228][T11637] usb 4-1: Using ep0 maxpacket: 16
[ 1883.952964][T11637] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[ 1883.961254][T11637] usb 4-1: config 0 has no interface number 0
[ 1883.967647][T11637] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1883.978988][T11637] usb 4-1: config 0 interface 130 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1883.989087][T11637] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=79.ae
[ 1883.998360][T11637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1884.009621][T11637] usb 4-1: config 0 descriptor??
[ 1884.053380][T11634] usb 5-1: Unsupported USB TX end-points
[ 1884.059167][T11634] usb 5-1: Fatal - failed to identify chip
[ 1884.065730][T11634] rtl8xxxu: probe of 5-1:0.0 failed with error -524
[ 1884.085713][T11637] snd-usb-audio: probe of 4-1:0.130 failed with error -12
[ 1884.097001][T11634] usb 5-1: USB disconnect, device number 53
[ 1884.279298][T11637] usb 4-1: USB disconnect, device number 24
[ 1885.652887][T11639] smscufx: Failed to write register index 0x0000000c with value 0x0fff2222
[ 1885.661600][T11639] smscufx: error writing 0x000C
[ 1885.661621][T11639] smscufx: error -71 initialising DDR2 controller
[ 1885.667747][T11639] smscufx: probe of 6-1:0.0 failed with error -71
[ 1885.685917][T11639] usb 6-1: USB disconnect, device number 125
16:24:18 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff0e, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

16:24:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5})

16:24:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5c0bcfe47bf070")
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280))
r3 = gettid()
r4 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000140)={r2, r0})

16:24:18 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf9, 0x70, 0x1c, 0x8, 0xbda, 0x818c, 0x298f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0)

16:24:18 executing program 3:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xc1, 0xd0, 0x10, 0x763, 0x1011, 0x79ae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x3, 0xff, 0x9a, 0x8d, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0)

16:24:19 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "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"}}, 0x110)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4)
unshare(0x40000000)

[ 1886.065679][ T1291] IPVS: ftp: loaded support on port[0] = 21
[ 1886.165032][T11637] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1886.173328][T11634] usb 5-1: new low-speed USB device number 54 using dummy_hcd
16:24:19 executing program 5:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

16:24:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:24:19 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "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"}}, 0x110)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4)
unshare(0x40000000)

[ 1886.443291][T11637] usb 4-1: Using ep0 maxpacket: 16
[ 1886.488878][ T1499] IPVS: ftp: loaded support on port[0] = 21
16:24:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1886.616095][T11637] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[ 1886.624902][T11637] usb 4-1: config 0 has no interface number 0
[ 1886.631093][T11637] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1886.642425][T11637] usb 4-1: config 0 interface 130 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1886.652479][T11637] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=79.ae
[ 1886.661772][T11637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1886.670847][T11634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt
[ 1886.680971][T11634] usb 5-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=29.8f
[ 1886.690229][T11634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1886.700466][T11639] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1886.715666][T11634] usb 5-1: config 0 descriptor??
[ 1886.722429][T11637] usb 4-1: config 0 descriptor??
[ 1886.754742][T11634] usb 5-1: This Realtek USB WiFi dongle (0x0bda:0x818c) is untested!
[ 1886.763409][T11634] usb 5-1: Please report results to Jes.Sorensen@gmail.com
[ 1886.783310][T11637] snd-usb-audio: probe of 4-1:0.130 failed with error -12
16:24:19 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "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"}}, 0x110)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4)
unshare(0x40000000)

16:24:20 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1886.942958][T11639] usb 6-1: Using ep0 maxpacket: 16
[ 1886.992490][T11637] usb 4-1: USB disconnect, device number 25
[ 1887.033461][T11634] usb 5-1: Unsupported USB TX end-points
[ 1887.036908][ T1608] IPVS: ftp: loaded support on port[0] = 21
[ 1887.039417][T11634] usb 5-1: Fatal - failed to identify chip
[ 1887.051657][T11634] rtl8xxxu: probe of 5-1:0.0 failed with error -524
[ 1887.070449][T11634] usb 5-1: USB disconnect, device number 54
[ 1887.113294][T11639] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1887.122723][T11639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1887.134859][T11639] usb 6-1: config 0 descriptor??
[ 1890.213166][T11639] smscufx: Failed to write register index 0x0000000c with value 0x0fff2222
[ 1890.222167][T11639] smscufx: error writing 0x000C
[ 1890.222188][T11639] smscufx: error -71 initialising DDR2 controller
[ 1890.228557][T11639] smscufx: probe of 6-1:0.0 failed with error -71
[ 1890.247928][T11639] usb 6-1: USB disconnect, device number 126
16:24:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x2b, 0xffffff0e, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

16:24:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:24:25 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "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"}}, 0x110)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4)
unshare(0x40000000)

16:24:25 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf9, 0x70, 0x1c, 0x8, 0xbda, 0x818c, 0x298f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0)

16:24:25 executing program 3:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xc1, 0xd0, 0x10, 0x763, 0x1011, 0x79ae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x3, 0xff, 0x9a, 0x8d, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0)

16:24:25 executing program 5:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

[ 1892.281525][ T1729] IPVS: ftp: loaded support on port[0] = 21
16:24:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:24:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1892.595262][ T1255] usb 5-1: new low-speed USB device number 55 using dummy_hcd
[ 1892.603610][T11640] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1892.611752][T11639] usb 4-1: new high-speed USB device number 26 using dummy_hcd
16:24:25 executing program 2:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

16:24:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xd0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:24:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="f9b936a2e22665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x134, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x104, 0x2, [@TCA_CGROUP_ACT={0xd4, 0x1, @m_nat={0xd0, 0x0, {{0x1be, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}}, {0x94, 0x6, "69b8c5f3ee26789f8763c2702b1139e5e9cf14cde2ebc2e7948cecdf4c3bab8bc1359b090dc500cd8f1a36bc682c7fb6e065aff0f733a31b494f95f19f92a63d2b61709c51709a648e84d18b45c7f953f0790bfae4be05bc901faea6eb6f20b329d9f833c5cb53060664f86188c57816352b517bc61850e110804ebdd9ebe2b783b13aa9c5e7d81c1a0d18568b"}}}}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0xfffffed9}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x134}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)

[ 1892.873190][T11639] usb 4-1: Using ep0 maxpacket: 16
[ 1892.878949][T11640] usb 6-1: Using ep0 maxpacket: 16
[ 1893.013369][T11640] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1893.022993][T11640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1893.032374][T11639] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[ 1893.040913][T11639] usb 4-1: config 0 has no interface number 0
[ 1893.047607][T11639] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
16:24:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="f9b936a2e22665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x134, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x104, 0x2, [@TCA_CGROUP_ACT={0xd4, 0x1, @m_nat={0xd0, 0x0, {{0x1be, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}}, {0x94, 0x6, "69b8c5f3ee26789f8763c2702b1139e5e9cf14cde2ebc2e7948cecdf4c3bab8bc1359b090dc500cd8f1a36bc682c7fb6e065aff0f733a31b494f95f19f92a63d2b61709c51709a648e84d18b45c7f953f0790bfae4be05bc901faea6eb6f20b329d9f833c5cb53060664f86188c57816352b517bc61850e110804ebdd9ebe2b783b13aa9c5e7d81c1a0d18568b"}}}}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0xfffffed9}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x134}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)

[ 1893.059245][T11639] usb 4-1: config 0 interface 130 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1893.069279][T11639] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=79.ae
[ 1893.079030][T11639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1893.088196][ T1255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt
[ 1893.098527][ T1255] usb 5-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=29.8f
[ 1893.107789][ T1255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1893.117214][T11637] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1893.127209][T11640] usb 6-1: config 0 descriptor??
[ 1893.140595][ T1255] usb 5-1: config 0 descriptor??
[ 1893.154127][T11639] usb 4-1: config 0 descriptor??
[ 1893.194792][ T1255] usb 5-1: This Realtek USB WiFi dongle (0x0bda:0x818c) is untested!
[ 1893.203558][ T1255] usb 5-1: Please report results to Jes.Sorensen@gmail.com
[ 1893.221189][T11639] snd-usb-audio: probe of 4-1:0.130 failed with error -12
[ 1893.383018][T11637] usb 3-1: Using ep0 maxpacket: 16
[ 1893.440074][T11634] usb 4-1: USB disconnect, device number 26
[ 1893.464099][ T1255] usb 5-1: Unsupported USB TX end-points
[ 1893.470095][ T1255] usb 5-1: Fatal - failed to identify chip
[ 1893.476676][ T1255] rtl8xxxu: probe of 5-1:0.0 failed with error -524
[ 1893.508474][ T1255] usb 5-1: USB disconnect, device number 55
[ 1893.530743][T11637] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1893.540214][T11637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1893.554973][T11637] usb 3-1: config 0 descriptor??
[ 1896.223266][T11640] smscufx: Failed to write register index 0x0000000c with value 0x0fff2222
[ 1896.231886][T11640] smscufx: error writing 0x000C
[ 1896.231908][T11640] smscufx: error -71 initialising DDR2 controller
[ 1896.238028][T11640] smscufx: probe of 6-1:0.0 failed with error -71
[ 1896.256707][T11640] usb 6-1: USB disconnect, device number 127
[ 1896.663121][T11637] smscufx: Failed to write register index 0x0000000c with value 0x0fff2222
[ 1896.671842][T11637] smscufx: error writing 0x000C
[ 1896.671857][T11637] smscufx: error -71 initialising DDR2 controller
[ 1896.677712][T11637] smscufx: probe of 3-1:0.0 failed with error -71
[ 1896.698555][T11637] usb 3-1: USB disconnect, device number 16
16:24:31 executing program 2:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

16:24:31 executing program 4:
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf9, 0x70, 0x1c, 0x8, 0xbda, 0x818c, 0x298f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0)

16:24:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="f9b936a2e22665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x134, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x104, 0x2, [@TCA_CGROUP_ACT={0xd4, 0x1, @m_nat={0xd0, 0x0, {{0x1be, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}}, {0x94, 0x6, "69b8c5f3ee26789f8763c2702b1139e5e9cf14cde2ebc2e7948cecdf4c3bab8bc1359b090dc500cd8f1a36bc682c7fb6e065aff0f733a31b494f95f19f92a63d2b61709c51709a648e84d18b45c7f953f0790bfae4be05bc901faea6eb6f20b329d9f833c5cb53060664f86188c57816352b517bc61850e110804ebdd9ebe2b783b13aa9c5e7d81c1a0d18568b"}}}}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0xfffffed9}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x134}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)

16:24:31 executing program 3:
syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xc1, 0xd0, 0x10, 0x763, 0x1011, 0x79ae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x3, 0xff, 0x9a, 0x8d, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0)

16:24:31 executing program 5:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

16:24:31 executing program 1:
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
preadv(r0, &(0x7f00000017c0), 0x2e7, 0x0)

16:24:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="f9b936a2e22665"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffffffffffff00000000000000000000000000000000008769697a8d0b17de6bb3fc89ec4af32bba7573cf1c489aec2786e301d2bd2eed5589862e198942c0eebcc19bb77a02f848525eef6ea4204526183efbd0fae86e9bb7b66b682c8e0bc116bff82909a903d5bfd7527496e606589b4c992f868fc3b8084283dd65bc97e42ff1f27052098bbff2e8941168d53ad0096e368cb1fc43e4b8b83642b10279a36d9b94edb99ab16d2788193a2a20180af6d1962323ee4390746bb12ab9d0fb88a23e9e6bd7ca9ce06091669a3b9ea5365a94aab2a6d2aa00f9797415ae54c323dcf7bf4675658988285ce2b8c42d3f94f67f3c26bec1606822712332e04bfcea84cc29"], 0x74}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x134, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x104, 0x2, [@TCA_CGROUP_ACT={0xd4, 0x1, @m_nat={0xd0, 0x0, {{0x1be, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}}, {0x94, 0x6, "69b8c5f3ee26789f8763c2702b1139e5e9cf14cde2ebc2e7948cecdf4c3bab8bc1359b090dc500cd8f1a36bc682c7fb6e065aff0f733a31b494f95f19f92a63d2b61709c51709a648e84d18b45c7f953f0790bfae4be05bc901faea6eb6f20b329d9f833c5cb53060664f86188c57816352b517bc61850e110804ebdd9ebe2b783b13aa9c5e7d81c1a0d18568b"}}}}, @TCA_CGROUP_EMATCHES={0x2c, 0x3, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0xfffffed9}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x134}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)

16:24:31 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

[ 1898.792994][ T1255] usb 5-1: new low-speed USB device number 56 using dummy_hcd
[ 1898.800886][T11640] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1898.808892][T11637] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1898.823292][T16697] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1899.043089][T11640] usb 6-1: Using ep0 maxpacket: 16
[ 1899.052968][T11637] usb 4-1: Using ep0 maxpacket: 16
[ 1899.062817][T16697] usb 3-1: Using ep0 maxpacket: 16
[ 1899.153133][ T1255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt
[ 1899.163619][ T1255] usb 5-1: New USB device found, idVendor=0bda, idProduct=818c, bcdDevice=29.8f
[ 1899.173068][ T1255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1899.181792][T11640] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1899.191048][T11640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1899.200879][T11640] usb 6-1: config 0 descriptor??
[ 1899.206421][T16697] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1899.207257][ T1255] usb 5-1: config 0 descriptor??
[ 1899.215791][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1899.229766][T11637] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[ 1899.231943][T16697] usb 3-1: config 0 descriptor??
[ 1899.238317][T11637] usb 4-1: config 0 has no interface number 0
[ 1899.249851][T11637] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1899.261123][T11637] usb 4-1: config 0 interface 130 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1899.271313][T11637] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=79.ae
[ 1899.280591][T11637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1899.293030][T11637] usb 4-1: config 0 descriptor??
[ 1899.304729][ T1255] usb 5-1: This Realtek USB WiFi dongle (0x0bda:0x818c) is untested!
[ 1899.313259][ T1255] usb 5-1: Please report results to Jes.Sorensen@gmail.com
[ 1899.341182][T11637] snd-usb-audio: probe of 4-1:0.130 failed with error -12
[ 1899.556463][T11637] usb 4-1: USB disconnect, device number 27
[ 1899.573916][ T1255] usb 5-1: Unsupported USB TX end-points
[ 1899.579795][ T1255] usb 5-1: Fatal - failed to identify chip
[ 1899.586429][ T1255] rtl8xxxu: probe of 5-1:0.0 failed with error -524
16:24:32 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

[ 1899.604457][ T1255] usb 5-1: USB disconnect, device number 56
16:24:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xa2, &(0x7f0000002000)=[{0x0, 0x25dea643f7f81faa}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a600000ffa84335910000003900090035000c0006000000190005001d810000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x61d7128f2fa08f, 0x0)

16:24:33 executing program 3:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]})

[ 1900.260505][ T2007] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1900.276751][ T2007] CPU: 0 PID: 2007 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0
[ 1900.284603][ T2007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1900.293201][ T2007] Call Trace:
[ 1900.293201][ T2007]  dump_stack+0x191/0x1f0
[ 1900.301847][ T2007]  warn_alloc+0x4e4/0x710
[ 1900.303034][ T2007]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1900.303034][ T2007]  __vmalloc_node_range+0xeec/0x1260
[ 1900.314744][ T2007]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1900.314744][ T2007]  __vmalloc_node_flags_caller+0x12a/0x140
[ 1900.327652][ T2007]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1900.327652][ T2007]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1900.340525][ T2007]  kvmalloc_node+0x393/0x3d0
[ 1900.340525][ T2007]  kvm_arch_create_memslot+0x172/0xa40
[ 1900.340525][ T2007]  __kvm_set_memory_region+0x128f/0x2db0
[ 1900.340525][ T2007]  kvm_vm_ioctl+0x132b/0x2df0
[ 1900.340525][ T2007]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1900.340525][ T2007]  ? vcpu_stat_clear_per_vm+0x2e0/0x2e0
[ 1900.340525][ T2007]  do_vfs_ioctl+0xea8/0x2c50
[ 1900.340525][ T2007]  ? security_file_ioctl+0x1bd/0x200
[ 1900.380327][ T2007]  __se_sys_ioctl+0x1da/0x270
[ 1900.385247][ T2007]  __x64_sys_ioctl+0x4a/0x70
[ 1900.385247][ T2007]  do_syscall_64+0xb6/0x160
[ 1900.385247][ T2007]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1900.385247][ T2007] RIP: 0033:0x459ef9
[ 1900.385247][ T2007] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1900.385247][ T2007] RSP: 002b:00007f6d66638c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1900.385247][ T2007] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9
[ 1900.385247][ T2007] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004
[ 1900.444277][ T2007] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1900.444277][ T2007] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d666396d4
[ 1900.444277][ T2007] R13: 00000000004c2ff8 R14: 00000000004d6d68 R15: 00000000ffffffff
[ 1900.476311][ T2007] Mem-Info:
[ 1900.479542][ T2007] active_anon:107851 inactive_anon:4144 isolated_anon:0
[ 1900.479542][ T2007]  active_file:11726 inactive_file:29652 isolated_file:0
[ 1900.479542][ T2007]  unevictable:3 dirty:74 writeback:0 unstable:0
[ 1900.479542][ T2007]  slab_reclaimable:6507 slab_unreclaimable:34624
[ 1900.479542][ T2007]  mapped:58986 shmem:4200 pagetables:5240 bounce:0
[ 1900.479542][ T2007]  free:491624 free_pcp:1516 free_cma:0
[ 1900.517885][ T2007] Node 0 active_anon:416036kB inactive_anon:1660kB active_file:42116kB inactive_file:113272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235820kB dirty:224kB writeback:0kB shmem:1880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 342016kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1900.547325][ T2007] Node 1 active_anon:15268kB inactive_anon:14916kB active_file:4788kB inactive_file:5336kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:72kB writeback:0kB shmem:14920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1900.575972][ T2007] Node 0 DMA free:13924kB min:216kB low:268kB high:320kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1900.603663][ T2007] lowmem_reserve[]: 0 2738 3428 3428
[ 1900.609060][ T2007] Node 0 DMA32 free:49008kB min:38652kB low:48312kB high:57972kB active_anon:399944kB inactive_anon:620kB active_file:29604kB inactive_file:104936kB unevictable:0kB writepending:208kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:8000kB pagetables:10808kB bounce:0kB free_pcp:2196kB local_pcp:912kB free_cma:0kB
[ 1900.639917][ T2007] lowmem_reserve[]: 0 0 690 690
[ 1900.644971][ T2007] Node 0 Normal free:11628kB min:9744kB low:12180kB high:14616kB active_anon:15952kB inactive_anon:1040kB active_file:12512kB inactive_file:8316kB unevictable:0kB writepending:16kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11200kB pagetables:1064kB bounce:0kB free_pcp:2660kB local_pcp:1304kB free_cma:0kB
[ 1900.675557][ T2007] lowmem_reserve[]: 0 0 0 0
[ 1900.680146][ T2007] Node 1 Normal free:1891176kB min:41492kB low:51864kB high:62236kB active_anon:15168kB inactive_anon:14916kB active_file:4788kB inactive_file:5336kB unevictable:12kB writepending:72kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:7616kB pagetables:8920kB bounce:0kB free_pcp:896kB local_pcp:388kB free_cma:0kB
[ 1900.710895][ T2007] lowmem_reserve[]: 0 0 0 0
[ 1900.710954][ T2007] Node 0 DMA: 5*4kB (UE) 2*8kB (E) 0*16kB 6*32kB (UME) 4*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13924kB
[ 1900.731865][ T2007] Node 0 DMA32: 1520*4kB (UM) 200*8kB (UME) 43*16kB (UME) 240*32kB (UM) 275*64kB (UME) 26*128kB (UME) 13*256kB (UME) 5*512kB (ME) 6*1024kB (UME) 0*2048kB 0*4096kB = 49008kB
[ 1900.749488][ T2007] Node 0 Normal: 207*4kB (UME) 92*8kB (UME) 23*16kB (UME) 59*32kB (UME) 40*64kB (UME) 15*128kB (UE) 7*256kB (UE) 1*512kB (E) 1*1024kB (U) 0*2048kB 0*4096kB = 11628kB
[ 1900.766463][ T2007] Node 1 Normal: 102*4kB (UM) 38*8kB (UME) 80*16kB (UME) 39*32kB (UME) 18*64kB (UME) 12*128kB (UM) 16*256kB (UME) 6*512kB (ME) 4*1024kB (M) 3*2048kB (UM) 456*4096kB (M) = 1891112kB
[ 1900.784801][ T2007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1900.794554][ T2007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
16:24:33 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

[ 1900.804035][ T2007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1900.813798][ T2007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1900.823478][ T2007] 45581 total pagecache pages
[ 1900.828231][ T2007] 0 pages in swap cache
[ 1900.832477][ T2007] Swap cache stats: add 0, delete 0, find 0/0
[ 1900.838700][ T2007] Free swap  = 0kB
[ 1900.842779][ T2007] Total swap = 0kB
[ 1900.846539][ T2007] 1965979 pages RAM
[ 1900.850376][ T2007] 0 pages HighMem/MovableOnly
[ 1900.855232][ T2007] 330599 pages reserved
[ 1900.859460][ T2007] 0 pages cma reserved
[ 1900.863983][T11640] smscufx: Failed to write register index 0x0000700c with value 0x8000000f
[ 1900.872754][T11640] smscufx: error writing 0x700C
[ 1900.872779][T11640] smscufx: error -71 configuring system clock
[ 1900.878554][T11640] smscufx: probe of 6-1:0.0 failed with error -71
[ 1900.913123][T11640] usb 6-1: USB disconnect, device number 2
[ 1902.492979][T16697] smscufx: Failed to write register index 0x0000000c with value 0x0fff2222
[ 1902.501769][T16697] smscufx: error writing 0x000C
[ 1902.501787][T16697] smscufx: error -71 initialising DDR2 controller
[ 1902.508088][T16697] smscufx: probe of 3-1:0.0 failed with error -71
[ 1902.526589][T16697] usb 3-1: USB disconnect, device number 17
16:24:36 executing program 2:
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="01002f"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

16:24:36 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)

16:24:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xa2, &(0x7f0000002000)=[{0x0, 0x25dea643f7f81faa}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a600000ffa84335910000003900090035000c0006000000190005001d810000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x61d7128f2fa08f, 0x0)

16:24:36 executing program 3:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]})

16:24:36 executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

[ 1903.073835][ T2344] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1903.090253][ T2344] CPU: 0 PID: 2344 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0
[ 1903.098113][ T2344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1903.099871][ T2344] Call Trace:
[ 1903.099871][ T2344]  dump_stack+0x191/0x1f0
[ 1903.099871][ T2344]  warn_alloc+0x4e4/0x710
[ 1903.119279][ T2344]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1903.126005][ T2344]  __vmalloc_node_range+0xeec/0x1260
[ 1903.127128][ T2344]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1903.127128][ T2344]  __vmalloc_node_flags_caller+0x12a/0x140
[ 1903.127128][ T2344]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1903.127128][ T2344]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1903.127128][ T2344]  kvmalloc_node+0x393/0x3d0
[ 1903.127128][ T2344]  kvm_arch_create_memslot+0x172/0xa40
[ 1903.153925][ T2344]  __kvm_set_memory_region+0x128f/0x2db0
[ 1903.153925][ T2344]  kvm_vm_ioctl+0x132b/0x2df0
[ 1903.153925][ T2344]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1903.153925][ T2344]  ? vcpu_stat_clear_per_vm+0x2e0/0x2e0
[ 1903.153925][ T2344]  do_vfs_ioctl+0xea8/0x2c50
[ 1903.189102][ T2344]  ? security_file_ioctl+0x1bd/0x200
[ 1903.196843][ T2344]  __se_sys_ioctl+0x1da/0x270
[ 1903.198282][ T2344]  __x64_sys_ioctl+0x4a/0x70
[ 1903.198282][ T2344]  do_syscall_64+0xb6/0x160
[ 1903.198282][ T2344]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1903.198282][ T2344] RIP: 0033:0x459ef9
[ 1903.198282][ T2344] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1903.198282][ T2344] RSP: 002b:00007f6d66638c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1903.198282][ T2344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9
[ 1903.198282][ T2344] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004
[ 1903.198282][ T2344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1903.198282][ T2344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d666396d4
[ 1903.198282][ T2344] R13: 00000000004c2ff8 R14: 00000000004d6d68 R15: 00000000ffffffff
[ 1903.290338][ T2344] Mem-Info:
[ 1903.293700][ T2344] active_anon:107817 inactive_anon:4141 isolated_anon:0
[ 1903.293700][ T2344]  active_file:11726 inactive_file:29661 isolated_file:0
[ 1903.293700][ T2344]  unevictable:3 dirty:82 writeback:0 unstable:0
[ 1903.293700][ T2344]  slab_reclaimable:6508 slab_unreclaimable:34584
[ 1903.293700][ T2344]  mapped:58986 shmem:4198 pagetables:5197 bounce:0
[ 1903.293700][ T2344]  free:491645 free_pcp:1581 free_cma:0
[ 1903.332072][ T2344] Node 0 active_anon:416036kB inactive_anon:1660kB active_file:42116kB inactive_file:113272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235820kB dirty:224kB writeback:0kB shmem:1880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 342016kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1903.361452][ T2344] Node 1 active_anon:15232kB inactive_anon:14904kB active_file:4788kB inactive_file:5372kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:104kB writeback:0kB shmem:14912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1903.390063][ T2344] Node 0 DMA free:13924kB min:216kB low:268kB high:320kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1903.417530][ T2344] lowmem_reserve[]: 0 2738 3428 3428
[ 1903.423025][ T2344] Node 0 DMA32 free:49008kB min:38652kB low:48312kB high:57972kB active_anon:399944kB inactive_anon:620kB active_file:29604kB inactive_file:104936kB unevictable:0kB writepending:208kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:8000kB pagetables:10808kB bounce:0kB free_pcp:2208kB local_pcp:912kB free_cma:0kB
[ 1903.453787][ T2344] lowmem_reserve[]: 0 0 690 690
[ 1903.458751][ T2344] Node 0 Normal free:11628kB min:9744kB low:12180kB high:14616kB active_anon:15952kB inactive_anon:1040kB active_file:12512kB inactive_file:8316kB unevictable:0kB writepending:16kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11200kB pagetables:1064kB bounce:0kB free_pcp:2660kB local_pcp:1304kB free_cma:0kB
[ 1903.489310][ T2344] lowmem_reserve[]: 0 0 0 0
[ 1903.494181][ T2344] Node 1 Normal free:1892148kB min:41492kB low:51864kB high:62236kB active_anon:15232kB inactive_anon:14904kB active_file:4788kB inactive_file:5372kB unevictable:12kB writepending:104kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:7616kB pagetables:8896kB bounce:0kB free_pcp:1564kB local_pcp:316kB free_cma:0kB
[ 1903.525267][ T2344] lowmem_reserve[]: 0 0 0 0
[ 1903.525838][T16697] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1903.529831][ T2344] Node 0 DMA: 5*4kB (UE) 2*8kB (E) 0*16kB 6*32kB (UME) 4*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13924kB
[ 1903.553983][ T2344] Node 0 DMA32: 1520*4kB (UM) 200*8kB (UME) 43*16kB (UME) 240*32kB (UM) 275*64kB (UME) 26*128kB (UME) 13*256kB (UME) 5*512kB (ME) 6*1024kB (UME) 0*2048kB 0*4096kB = 49008kB
[ 1903.571630][ T2344] Node 0 Normal: 207*4kB (UME) 92*8kB (UME) 23*16kB (UME) 59*32kB (UME) 40*64kB (UME) 15*128kB (UE) 7*256kB (UE) 1*512kB (E) 1*1024kB (U) 0*2048kB 0*4096kB = 11628kB
[ 1903.588677][ T2344] Node 1 Normal: 3*4kB (UME) 1*8kB (E) 71*16kB (UM) 38*32kB (UME) 21*64kB (UME) 19*128kB (UM) 19*256kB (UME) 6*512kB (ME) 4*1024kB (M) 3*2048kB (UM) 456*4096kB (M) = 1892100kB
[ 1903.606476][ T2344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1903.616276][ T2344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1903.625843][ T2344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1903.635522][ T2344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1903.645005][ T2344] 45587 total pagecache pages
[ 1903.649833][ T2344] 0 pages in swap cache
[ 1903.654195][ T2344] Swap cache stats: add 0, delete 0, find 0/0
[ 1903.660290][ T2344] Free swap  = 0kB
[ 1903.664186][ T2344] Total swap = 0kB
[ 1903.667942][ T2344] 1965979 pages RAM
[ 1903.671777][ T2344] 0 pages HighMem/MovableOnly
[ 1903.676670][ T2344] 330599 pages reserved
[ 1903.680968][ T2344] 0 pages cma reserved
[ 1903.795055][T16697] usb 3-1: Using ep0 maxpacket: 16
[ 1903.913061][T16697] usb 3-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1903.922396][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1903.933485][T16697] usb 3-1: config 0 descriptor??
16:24:38 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x800000000000b)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000860], 0x0, &(0x7f0000000140), &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x1f0)

16:24:38 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)

16:24:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xa2, &(0x7f0000002000)=[{0x0, 0x25dea643f7f81faa}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a600000ffa84335910000003900090035000c0006000000190005001d810000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x61d7128f2fa08f, 0x0)

16:24:38 executing program 3:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]})

16:24:38 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

[ 1905.740157][ T2456] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1905.756332][ T2456] CPU: 0 PID: 2456 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0
[ 1905.764200][ T2456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1905.764738][T16697] smscufx: Failed to write register index 0x0000700c with value 0xcb0a3dc0
[ 1905.766138][ T2456] Call Trace:
[ 1905.772581][ T2456]  dump_stack+0x191/0x1f0
[ 1905.772581][ T2456]  warn_alloc+0x4e4/0x710
[ 1905.772581][ T2456]  ? kmsan_get_metadata+0x39/0x350
[ 1905.783106][T16697] smscufx: ufx_reg_clear_and_set_bits error writing 0x700c
[ 1905.783119][T16697] smscufx: error clearing PLL1 bypass in 0x700C
[ 1905.772581][ T2456]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1905.790670][T16697] smscufx: error -32 configuring system clock
[ 1905.791524][T16697] smscufx: probe of 3-1:0.0 failed with error -32
[ 1905.772581][ T2456]  __vmalloc_node_range+0xeec/0x1260
[ 1905.772581][ T2456]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1905.804502][ T2456]  __vmalloc_node_flags_caller+0x12a/0x140
[ 1905.804502][ T2456]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1905.804502][ T2456]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1905.804502][ T2456]  kvmalloc_node+0x393/0x3d0
[ 1905.804502][ T2456]  kvm_arch_create_memslot+0x172/0xa40
[ 1905.869345][ T2456]  __kvm_set_memory_region+0x128f/0x2db0
[ 1905.869345][ T2456]  kvm_vm_ioctl+0x132b/0x2df0
[ 1905.869345][ T2456]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1905.869345][ T2456]  ? vcpu_stat_clear_per_vm+0x2e0/0x2e0
[ 1905.869345][ T2456]  do_vfs_ioctl+0xea8/0x2c50
[ 1905.869345][ T2456]  ? security_file_ioctl+0x1bd/0x200
[ 1905.869345][ T2456]  __se_sys_ioctl+0x1da/0x270
[ 1905.869345][ T2456]  __x64_sys_ioctl+0x4a/0x70
[ 1905.869345][ T2456]  do_syscall_64+0xb6/0x160
[ 1905.869345][ T2456]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1905.869345][ T2456] RIP: 0033:0x459ef9
[ 1905.869345][ T2456] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1905.869345][ T2456] RSP: 002b:00007f6d66638c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1905.869345][ T2456] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9
[ 1905.869345][ T2456] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004
[ 1905.869345][ T2456] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1905.869345][ T2456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d666396d4
[ 1905.869345][ T2456] R13: 00000000004c2ff8 R14: 00000000004d6d68 R15: 00000000ffffffff
[ 1905.995376][ T2456] Mem-Info:
[ 1905.998759][ T2456] active_anon:107292 inactive_anon:4143 isolated_anon:0
[ 1905.998759][ T2456]  active_file:11726 inactive_file:29669 isolated_file:0
[ 1905.998759][ T2456]  unevictable:3 dirty:90 writeback:0 unstable:0
[ 1905.998759][ T2456]  slab_reclaimable:6508 slab_unreclaimable:34607
[ 1905.998759][ T2456]  mapped:58986 shmem:4199 pagetables:5213 bounce:0
[ 1905.998759][ T2456]  free:493319 free_pcp:1618 free_cma:0
16:24:39 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

16:24:39 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)

[ 1906.039774][ T2456] Node 0 active_anon:413988kB inactive_anon:1660kB active_file:42116kB inactive_file:113272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235820kB dirty:224kB writeback:0kB shmem:1880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 342016kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1906.070156][ T2456] Node 1 active_anon:15180kB inactive_anon:14912kB active_file:4788kB inactive_file:5404kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:136kB writeback:0kB shmem:14916kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1906.098725][ T2456] Node 0 DMA free:13924kB min:216kB low:268kB high:320kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1906.126150][ T2456] lowmem_reserve[]: 0 2738 3428 3428
[ 1906.131529][ T2456] Node 0 DMA32 free:51056kB min:38652kB low:48312kB high:57972kB active_anon:397896kB inactive_anon:620kB active_file:29604kB inactive_file:104936kB unevictable:0kB writepending:208kB present:3129332kB managed:2809044kB mlocked:0kB kernel_stack:8000kB pagetables:10808kB bounce:0kB free_pcp:2208kB local_pcp:912kB free_cma:0kB
[ 1906.163222][ T2456] lowmem_reserve[]: 0 0 690 690
[ 1906.168234][ T2456] Node 0 Normal free:11628kB min:9744kB low:12180kB high:14616kB active_anon:15952kB inactive_anon:1040kB active_file:12512kB inactive_file:8316kB unevictable:0kB writepending:16kB present:786432kB managed:706784kB mlocked:0kB kernel_stack:11200kB pagetables:1064kB bounce:0kB free_pcp:2660kB local_pcp:1304kB free_cma:0kB
[ 1906.198618][ T2456] lowmem_reserve[]: 0 0 0 0
[ 1906.203373][ T2456] Node 1 Normal free:1896668kB min:41492kB low:51864kB high:62236kB active_anon:15180kB inactive_anon:14912kB active_file:4788kB inactive_file:5404kB unevictable:12kB writepending:136kB present:3932160kB managed:3009788kB mlocked:0kB kernel_stack:7488kB pagetables:8960kB bounce:0kB free_pcp:1552kB local_pcp:248kB free_cma:0kB
[ 1906.234472][ T2456] lowmem_reserve[]: 0 0 0 0
[ 1906.239060][ T2456] Node 0 DMA: 5*4kB (UE) 2*8kB (E) 0*16kB 6*32kB (UME) 4*64kB (UME) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 1*4096kB (M) = 13924kB
[ 1906.255422][ T2456] Node 0 DMA32: 1520*4kB (UM) 200*8kB (UME) 43*16kB (UME) 240*32kB (UM) 275*64kB (UME) 26*128kB (UME) 13*256kB (UME) 5*512kB (ME) 6*1024kB (UME) 1*2048kB (M) 0*4096kB = 51056kB
[ 1906.273259][ T2456] Node 0 Normal: 207*4kB (UME) 92*8kB (UME) 23*16kB (UME) 59*32kB (UME) 40*64kB (UME) 15*128kB (UE) 7*256kB (UE) 1*512kB (E) 1*1024kB (U) 0*2048kB 0*4096kB = 11628kB
[ 1906.290142][ T2456] Node 1 Normal: 127*4kB (UME) 18*8kB (UME) 69*16kB (ME) 42*32kB (UME) 21*64kB (UME) 17*128kB (UM) 19*256kB (UME) 6*512kB (ME) 4*1024kB (M) 5*2048kB (UM) 456*4096kB (M) = 1896668kB
[ 1906.308381][ T2456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1906.318129][ T2456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1906.327672][ T2456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1906.337436][ T2456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1906.346873][ T2456] 45596 total pagecache pages
[ 1906.351629][ T2456] 0 pages in swap cache
[ 1906.355956][ T2456] Swap cache stats: add 0, delete 0, find 0/0
[ 1906.362093][ T2456] Free swap  = 0kB
[ 1906.365975][ T2456] Total swap = 0kB
[ 1906.369763][ T2456] 1965979 pages RAM
[ 1906.373715][ T2456] 0 pages HighMem/MovableOnly
[ 1906.378464][ T2456] 330599 pages reserved
[ 1906.382769][ T2456] 0 pages cma reserved
16:24:39 executing program 3:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000800)={0x0, [0x0, 0x0, 0x0, 0x0, 0x500]})

16:24:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xa2, &(0x7f0000002000)=[{0x0, 0x25dea643f7f81faa}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5300fe01b2a4a280930a600000ffa84335910000003900090035000c0006000000190005001d810000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x61d7128f2fa08f, 0x0)

16:24:39 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="421e9114516d4a838fc3059266fa170e288efe205f36906f37f08a2db6", 0x1d)

16:24:39 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

16:24:39 executing program 2:
mbind(&(0x7f00007d3000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000180)=0x3, 0x28e8, 0x0)
mprotect(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x0)

[ 1906.638377][T11640] usb 3-1: USB disconnect, device number 18
[ 1906.720667][ T2687] syz-executor.3: vmalloc: allocation failure: 10737418240 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1906.736794][ T2687] CPU: 0 PID: 2687 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0
[ 1906.744658][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1906.746569][ T2687] Call Trace:
[ 1906.746569][ T2687]  dump_stack+0x191/0x1f0
[ 1906.746569][ T2687]  warn_alloc+0x4e4/0x710
[ 1906.746569][ T2687]  ? kmsan_get_metadata+0x39/0x350
[ 1906.746569][ T2687]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1906.746569][ T2687]  __vmalloc_node_range+0xeec/0x1260
[ 1906.746569][ T2687]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1906.746569][ T2687]  __vmalloc_node_flags_caller+0x12a/0x140
[ 1906.746569][ T2687]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1906.746569][ T2687]  ? kvm_arch_create_memslot+0x172/0xa40
[ 1906.746569][ T2687]  kvmalloc_node+0x393/0x3d0
[ 1906.746569][ T2687]  kvm_arch_create_memslot+0x172/0xa40
[ 1906.746569][ T2687]  __kvm_set_memory_region+0x128f/0x2db0
[ 1906.746569][ T2687]  kvm_vm_ioctl+0x132b/0x2df0
[ 1906.746569][ T2687]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 1906.746569][ T2687]  ? vcpu_stat_clear_per_vm+0x2e0/0x2e0
[ 1906.746569][ T2687]  do_vfs_ioctl+0xea8/0x2c50
[ 1906.746569][ T2687]  ? security_file_ioctl+0x1bd/0x200
[ 1906.746569][ T2687]  __se_sys_ioctl+0x1da/0x270
[ 1906.746569][ T2687]  __x64_sys_ioctl+0x4a/0x70
[ 1906.746569][ T2687]  do_syscall_64+0xb6/0x160
[ 1906.746569][ T2687]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 1906.746569][ T2687] RIP: 0033:0x459ef9
[ 1906.746569][ T2687] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1906.746569][ T2687] RSP: 002b:00007f6d66638c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1906.746569][ T2687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9
[ 1906.746569][ T2687] RDX: 0000000020000800 RSI: 000000004020ae46 RDI: 0000000000000004
[ 1906.746569][ T2687] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1906.746569][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d666396d4
[ 1906.746569][ T2687] R13: 00000000004c2ff8 R14: 00000000004d6d68 R15: 00000000ffffffff
16:24:46 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x80, 0x0}, 0x8000)
sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000400), 0xb80b}], 0x1}, 0x0)

16:24:46 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0)

16:24:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

16:24:46 executing program 2:
mbind(&(0x7f00007d3000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000180)=0x3, 0x28e8, 0x0)
mprotect(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x0)

16:24:46 executing program 4:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000101000040ff0f000000000000434810000200040001000800020004eee3a2"], 0x24}}, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0)

16:24:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4020aeb2, 0x0)

[ 1913.006533][ T2706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
16:24:46 executing program 2:
mbind(&(0x7f00007d3000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000180)=0x3, 0x28e8, 0x0)
mprotect(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x0)

16:24:46 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x6)

16:24:46 executing program 4:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000101000040ff0f000000000000434810000200040001000800020004eee3a2"], 0x24}}, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0)

16:24:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4020aeb2, 0x0)

16:24:46 executing program 2:
mbind(&(0x7f00007d3000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000180)=0x3, 0x28e8, 0x0)
mprotect(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x0)

16:24:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

[ 1913.434345][ T3021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
16:24:50 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x80, 0x0}, 0x8000)
sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000400), 0xb80b}], 0x1}, 0x0)

16:24:50 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x6)

16:24:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

16:24:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4020aeb2, 0x0)

16:24:50 executing program 4:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000101000040ff0f000000000000434810000200040001000800020004eee3a2"], 0x24}}, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0)

16:24:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

[ 1917.702548][ T3043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
16:24:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

16:24:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

16:24:50 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x6)

16:24:50 executing program 4:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000101000040ff0f000000000000434810000200040001000800020004eee3a2"], 0x24}}, 0x0)
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010207031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0)

16:24:50 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
unshare(0x20600)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4020aeb2, 0x0)

[ 1917.937349][ T3057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
16:24:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xf0, 0x0, 0x0, 0xf0, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000001240), {[{{@uncond, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}, {{@ipv6={@local, @remote, [0x24f1c88fd7e8ea42, 0xb7664311fd0eab16, 0xff000000, 0x6428eb3cfdb3ccee], [0xffff7f, 0x0, 0xffffffff, 0xff000000], 'ip6tnl0\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x7, 0x4, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x4, 0x1, [0x6, 0x17e8, 0x3f, 0x5, 0x2, 0x1, 0x8, 0x2, 0x9, 0x1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x20], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x1b, 0x400, 0x100, 0x8, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x9, 0xff}, {0x1f, 0x6, 0x3}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

16:24:55 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x80, 0x0}, 0x8000)
sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000400), 0xb80b}], 0x1}, 0x0)

16:24:55 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

16:24:55 executing program 4:
r0 = memfd_create(&(0x7f0000000140)='/proc/capi/cap\x06\x00\x00\x00cci\x00', 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="35bce93c2ad9dffa72cece5121a9f7cad0f670ce86f7d90ff003a2044ed0554b6cb1562241bc", 0x26}], 0x1}], 0x1, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)

16:24:55 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x6)

16:24:55 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xd2c8, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r0)

16:24:55 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004396f308f30cff20bf7900000001090224000100000000090462000250d93c1009050aff000000eaff080501000000000000"], 0x0)

16:24:55 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

16:24:55 executing program 4:
r0 = memfd_create(&(0x7f0000000140)='/proc/capi/cap\x06\x00\x00\x00cci\x00', 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="35bce93c2ad9dffa72cece5121a9f7cad0f670ce86f7d90ff003a2044ed0554b6cb1562241bc", 0x26}], 0x1}], 0x1, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)

16:24:55 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

16:24:55 executing program 4:
r0 = memfd_create(&(0x7f0000000140)='/proc/capi/cap\x06\x00\x00\x00cci\x00', 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="35bce93c2ad9dffa72cece5121a9f7cad0f670ce86f7d90ff003a2044ed0554b6cb1562241bc", 0x26}], 0x1}], 0x1, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)

[ 1922.334053][T11640] usb 3-1: new high-speed USB device number 19 using dummy_hcd
16:24:55 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

16:24:55 executing program 4:
r0 = memfd_create(&(0x7f0000000140)='/proc/capi/cap\x06\x00\x00\x00cci\x00', 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="35bce93c2ad9dffa72cece5121a9f7cad0f670ce86f7d90ff003a2044ed0554b6cb1562241bc", 0x26}], 0x1}], 0x1, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)

[ 1922.592844][T11640] usb 3-1: Using ep0 maxpacket: 8
[ 1922.743091][T11640] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[ 1922.751274][T11640] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[ 1922.758895][T11640] usb 3-1: config 0 has no interface number 0
[ 1922.765090][T11640] usb 3-1: config 0 interface 98 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1922.776293][T11640] usb 3-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=79.bf
[ 1922.785450][T11640] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.795465][T11640] usb 3-1: config 0 descriptor??
[ 1923.083095][T11640] usb 3-1: string descriptor 0 read error: -71
[ 1923.090244][T11640] usb 3-1: ath9k_htc: Could not find bulk out endpoint
[ 1923.105117][T11640] usb 3-1: USB disconnect, device number 19
[ 1923.802855][T16697] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1924.052839][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 1924.172963][T16697] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[ 1924.181104][T16697] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[ 1924.188799][T16697] usb 3-1: config 0 has no interface number 0
[ 1924.195020][T16697] usb 3-1: config 0 interface 98 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1924.206127][T16697] usb 3-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=79.bf
[ 1924.215391][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1924.224880][T16697] usb 3-1: config 0 descriptor??
[ 1924.503089][T16697] usb 3-1: string descriptor 0 read error: -71
[ 1924.510350][T16697] usb 3-1: ath9k_htc: Could not find bulk out endpoint
[ 1924.524736][T16697] usb 3-1: USB disconnect, device number 20
16:25:00 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x80, 0x0}, 0x8000)
sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000400), 0xb80b}], 0x1}, 0x0)

16:25:00 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

16:25:00 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

16:25:00 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

16:25:00 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xd2c8, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r0)

16:25:00 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004396f308f30cff20bf7900000001090224000100000000090462000250d93c1009050aff000000eaff080501000000000000"], 0x0)

16:25:00 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000))

16:25:00 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

16:25:00 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

[ 1927.472911][T16697] usb 3-1: new high-speed USB device number 21 using dummy_hcd
16:25:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="25000000000000000000000043126c98433e58f305e8d3ccdd328f387f8abb9975e45567a811f29cb70c00000000000000753a2d8292cefd857ba472a2e5f4ef0a26ac7aa2036550c2c4063a27a0073098b7586cfe4e78e602a71564260df37da3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)=0x1002)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:00 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x268, 0x0)
keyctl$revoke(0x3, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
fsync(0xffffffffffffffff)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0)
ftruncate(r2, 0x10099b7)
sendfile(r1, r2, 0x0, 0xfffffffd)
connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e)

16:25:00 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

[ 1927.712819][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 1927.833214][T16697] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[ 1927.841565][T16697] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[ 1927.849389][T16697] usb 3-1: config 0 has no interface number 0
[ 1927.855747][T16697] usb 3-1: config 0 interface 98 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1927.866869][T16697] usb 3-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=79.bf
[ 1927.876144][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1927.895873][T16697] usb 3-1: config 0 descriptor??
[ 1928.163173][T16697] usb 3-1: string descriptor 0 read error: -71
[ 1928.170183][T16697] usb 3-1: ath9k_htc: Could not find bulk out endpoint
[ 1928.184313][T16697] usb 3-1: USB disconnect, device number 21
16:25:04 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004396f308f30cff20bf7900000001090224000100000000090462000250d93c1009050aff000000eaff080501000000000000"], 0x0)

16:25:04 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="25000000000000000000000043126c98433e58f305e8d3ccdd328f387f8abb9975e45567a811f29cb70c00000000000000753a2d8292cefd857ba472a2e5f4ef0a26ac7aa2036550c2c4063a27a0073098b7586cfe4e78e602a71564260df37da3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)=0x1002)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:04 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

16:25:04 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xd2c8, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r0)

16:25:04 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

16:25:04 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

[ 1931.646102][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
16:25:04 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="25000000000000000000000043126c98433e58f305e8d3ccdd328f387f8abb9975e45567a811f29cb70c00000000000000753a2d8292cefd857ba472a2e5f4ef0a26ac7aa2036550c2c4063a27a0073098b7586cfe4e78e602a71564260df37da3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)=0x1002)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:04 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

[ 1931.864911][T16697] usb 3-1: new high-speed USB device number 22 using dummy_hcd
16:25:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="25000000000000000000000043126c98433e58f305e8d3ccdd328f387f8abb9975e45567a811f29cb70c00000000000000753a2d8292cefd857ba472a2e5f4ef0a26ac7aa2036550c2c4063a27a0073098b7586cfe4e78e602a71564260df37da3"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)=0x1002)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1932.113051][T16697] usb 3-1: Using ep0 maxpacket: 8
16:25:05 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0)

[ 1932.234990][T16697] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[ 1932.243418][T16697] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[ 1932.250719][T16697] usb 3-1: config 0 has no interface number 0
[ 1932.257111][T16697] usb 3-1: config 0 interface 98 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1932.268249][T16697] usb 3-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=79.bf
[ 1932.277483][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1932.296368][T16697] usb 3-1: config 0 descriptor??
16:25:05 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0xa, 0x3, 0xf4)
dup2(r2, r0)

[ 1932.395304][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1932.573487][T16697] usb 3-1: string descriptor 0 read error: -71
[ 1932.580761][T16697] usb 3-1: ath9k_htc: Could not find bulk out endpoint
[ 1932.594484][T11631] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1932.604090][T16697] usb 3-1: USB disconnect, device number 22
[ 1932.832872][T11631] usb 1-1: Using ep0 maxpacket: 32
[ 1932.953076][T11631] usb 1-1: config 0 has an invalid interface number: 232 but max is 0
[ 1932.961515][T11631] usb 1-1: config 0 has no interface number 0
16:25:06 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004396f308f30cff20bf7900000001090224000100000000090462000250d93c1009050aff000000eaff080501000000000000"], 0x0)

16:25:06 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0xa, 0x3, 0xf4)
dup2(r2, r0)

16:25:06 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:06 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xd2c8, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r0)

[ 1933.083129][T11631] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1933.092271][T11631] usb 1-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1933.100845][T11631] usb 1-1: Product: syz
[ 1933.105143][T11631] usb 1-1: Manufacturer: syz
16:25:06 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0xa, 0x3, 0xf4)
dup2(r2, r0)

[ 1933.152394][ T3234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1933.155594][T11631] usb 1-1: config 0 descriptor??
[ 1933.226150][T11631] ftdi_sio 1-1:0.232: FTDI USB Serial Device converter detected
[ 1933.235023][T11631] usb 1-1: Detected SIO
[ 1933.243478][T11631] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1933.410873][T11631] usb 1-1: USB disconnect, device number 92
[ 1933.423357][T11631] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1933.434338][T11631] ftdi_sio 1-1:0.232: device disconnected
[ 1933.442227][T16697] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1933.692862][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 1933.813019][T16697] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[ 1933.821238][T16697] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[ 1933.828690][T16697] usb 3-1: config 0 has no interface number 0
[ 1933.834975][T16697] usb 3-1: config 0 interface 98 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1933.850581][T16697] usb 3-1: New USB device found, idVendor=0cf3, idProduct=20ff, bcdDevice=79.bf
[ 1933.859850][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1933.869674][T16697] usb 3-1: config 0 descriptor??
[ 1934.153198][T16697] usb 3-1: string descriptor 0 read error: -71
[ 1934.160325][T16697] usb 3-1: ath9k_htc: Could not find bulk out endpoint
[ 1934.176463][T16697] usb 3-1: USB disconnect, device number 23
[ 1934.212988][T11640] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1934.462837][T11640] usb 1-1: Using ep0 maxpacket: 32
[ 1934.583087][T11640] usb 1-1: config 0 has an invalid interface number: 232 but max is 0
[ 1934.592088][T11640] usb 1-1: config 0 has no interface number 0
[ 1934.713078][T11640] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1934.722467][T11640] usb 1-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1934.731384][T11640] usb 1-1: Product: syz
[ 1934.735847][T11640] usb 1-1: Manufacturer: syz
[ 1934.741640][T11640] usb 1-1: config 0 descriptor??
[ 1934.786041][T11640] ftdi_sio 1-1:0.232: FTDI USB Serial Device converter detected
[ 1934.794739][T11640] usb 1-1: Detected SIO
[ 1934.799955][T11640] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1934.985097][T16697] usb 1-1: USB disconnect, device number 93
[ 1934.996054][T16697] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1935.006500][T16697] ftdi_sio 1-1:0.232: device disconnected
16:25:13 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

16:25:13 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:13 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0xa, 0x3, 0xf4)
dup2(r2, r0)

16:25:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:13 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000600)='system.posix_acl_default\x00')

16:25:13 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0)

16:25:13 executing program 5:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0)

[ 1940.037093][ T3267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1940.048422][ T3269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
16:25:13 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000600)='system.posix_acl_default\x00')

16:25:13 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:13 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:13 executing program 5:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0)

16:25:13 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000600)='system.posix_acl_default\x00')

[ 1940.293133][T16697] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1940.348376][ T3284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1940.367160][ T3285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1940.534752][T16697] usb 1-1: Using ep0 maxpacket: 32
[ 1940.653261][T16697] usb 1-1: config 0 has an invalid interface number: 232 but max is 0
[ 1940.661642][T16697] usb 1-1: config 0 has no interface number 0
[ 1940.803222][T16697] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1940.812552][T16697] usb 1-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1940.821255][T16697] usb 1-1: Product: syz
[ 1940.825570][T16697] usb 1-1: Manufacturer: syz
[ 1940.831572][T16697] usb 1-1: config 0 descriptor??
[ 1940.875256][T16697] ftdi_sio 1-1:0.232: FTDI USB Serial Device converter detected
[ 1940.884164][T16697] usb 1-1: Detected SIO
[ 1940.889795][T16697] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1941.078690][T16697] usb 1-1: USB disconnect, device number 94
[ 1941.087808][T16697] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1941.098259][T16697] ftdi_sio 1-1:0.232: device disconnected
16:25:20 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000600)='system.posix_acl_default\x00')

16:25:20 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0)

16:25:20 executing program 5:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0)

16:25:20 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20)

16:25:20 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1)
sendto$inet6(r2, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1}, 0x0)

16:25:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0xffffffff, 0x3}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x9, 0x66a})

16:25:20 executing program 5:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tmpfs\x00', 0x0, 0x0)

[ 1947.438414][ T3313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
16:25:20 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

16:25:20 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0xffffffff, 0x3}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x9, 0x66a})

16:25:20 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)

[ 1947.664715][T16697] usb 1-1: new high-speed USB device number 95 using dummy_hcd
16:25:20 executing program 5:
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000c82000/0x2000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

16:25:20 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

[ 1947.903247][T16697] usb 1-1: Using ep0 maxpacket: 32
[ 1948.023354][T16697] usb 1-1: config 0 has an invalid interface number: 232 but max is 0
[ 1948.031734][T16697] usb 1-1: config 0 has no interface number 0
[ 1948.163270][T16697] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1948.172399][T16697] usb 1-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1948.181124][T16697] usb 1-1: Product: syz
[ 1948.185394][T16697] usb 1-1: Manufacturer: syz
[ 1948.191286][T16697] usb 1-1: config 0 descriptor??
[ 1948.235833][T16697] ftdi_sio 1-1:0.232: FTDI USB Serial Device converter detected
[ 1948.244560][T16697] usb 1-1: Detected SIO
[ 1948.249870][T16697] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1948.439367][T16697] usb 1-1: USB disconnect, device number 95
[ 1948.448652][T16697] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1948.458998][T16697] ftdi_sio 1-1:0.232: device disconnected
16:25:26 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0)

16:25:26 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

16:25:26 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)

16:25:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0xffffffff, 0x3}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x9, 0x66a})

16:25:26 executing program 5:
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000c82000/0x2000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

16:25:26 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

16:25:26 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

16:25:26 executing program 5:
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000c82000/0x2000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

16:25:27 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)

16:25:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0xffffffff, 0x3}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x9, 0x66a})

16:25:27 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000))

16:25:27 executing program 5:
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000c82000/0x2000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

[ 1954.082924][ T1255] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1954.326549][ T1255] usb 1-1: Using ep0 maxpacket: 32
[ 1954.443058][ T1255] usb 1-1: config 0 has an invalid interface number: 232 but max is 0
[ 1954.451394][ T1255] usb 1-1: config 0 has no interface number 0
[ 1954.573067][ T1255] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1954.582158][ T1255] usb 1-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1954.590803][ T1255] usb 1-1: Product: syz
[ 1954.595058][ T1255] usb 1-1: Manufacturer: syz
[ 1954.600819][ T1255] usb 1-1: config 0 descriptor??
[ 1954.646003][ T1255] ftdi_sio 1-1:0.232: FTDI USB Serial Device converter detected
[ 1954.654584][ T1255] usb 1-1: Detected SIO
[ 1954.659865][ T1255] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1954.849156][ T1255] usb 1-1: USB disconnect, device number 96
[ 1954.857919][ T1255] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1954.868490][ T1255] ftdi_sio 1-1:0.232: device disconnected
16:25:28 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000580)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r1, 0x2, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x0])

16:25:33 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000))

16:25:33 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

16:25:33 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @local, 0x6}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=0x78)

16:25:33 executing program 3:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)

16:25:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='q', 0x1)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000000)=[{&(0x7f0000000200)="f5", 0x20000201}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/103, 0x200001e7}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2}}], 0x1, 0x0, 0x0)

16:25:33 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000580)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r1, 0x2, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x0])

16:25:33 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000))

16:25:33 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @local, 0x6}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=0x78)

16:25:33 executing program 3:
pipe2(&(0x7f0000000080), 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:33 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000))

16:25:33 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000580)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r1, 0x2, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x0])

16:25:33 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @local, 0x6}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=0x78)

16:25:33 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @local, 0x6}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=0x78)

16:25:40 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x6d, 0x2, 0xc, 0x0}, 0x3c)
bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c)

16:25:40 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x7fffffff, &(0x7f0000000200)=0x81)

16:25:40 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
io_setup(0x3, &(0x7f0000000580)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r1, 0x2, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x0])

16:25:40 executing program 5:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)=0x40000)

16:25:40 executing program 3:
pipe2(&(0x7f0000000080), 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:40 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='q', 0x1)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000000)=[{&(0x7f0000000200)="f5", 0x20000201}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/103, 0x200001e7}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2}}], 0x1, 0x0, 0x0)

16:25:40 executing program 5:
unshare(0x600)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x43, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

16:25:40 executing program 4:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:40 executing program 3:
pipe2(&(0x7f0000000080), 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:40 executing program 5:
unshare(0x600)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x43, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

16:25:40 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x7fffffff, &(0x7f0000000200)=0x81)

16:25:40 executing program 4:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:46 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='q', 0x1)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000000)=[{&(0x7f0000000200)="f5", 0x20000201}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/103, 0x200001e7}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2}}], 0x1, 0x0, 0x0)

16:25:46 executing program 5:
unshare(0x600)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x43, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

16:25:46 executing program 3:
pipe2(&(0x7f0000000080), 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:46 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x7fffffff, &(0x7f0000000200)=0x81)

16:25:46 executing program 4:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:46 executing program 1:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:46 executing program 5:
unshare(0x600)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x43, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

16:25:46 executing program 4:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:46 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x7fffffff, &(0x7f0000000200)=0x81)

16:25:46 executing program 3:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x6, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:46 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101802, 0x0)
pwritev(r0, &(0x7f00000019c0)=[{&(0x7f0000000280)="c4", 0x300}], 0x1, 0x0)

16:25:47 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)

16:25:47 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='q', 0x1)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000000)=[{&(0x7f0000000200)="f5", 0x20000201}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/103, 0x200001e7}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2}}], 0x1, 0x0, 0x0)

16:25:47 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fff}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6)
sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)

16:25:47 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101802, 0x0)
pwritev(r0, &(0x7f00000019c0)=[{&(0x7f0000000280)="c4", 0x300}], 0x1, 0x0)

16:25:47 executing program 3:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x6, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:47 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)

16:25:51 executing program 1:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:51 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)

16:25:51 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101802, 0x0)
pwritev(r0, &(0x7f00000019c0)=[{&(0x7f0000000280)="c4", 0x300}], 0x1, 0x0)

16:25:51 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fff}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6)
sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)

16:25:51 executing program 3:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x6, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:51 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x9}, @IFLA_BOND_MODE={0x8, 0xa}]}}}]}, 0x44}}, 0x0)

16:25:51 executing program 4:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101802, 0x0)
pwritev(r0, &(0x7f00000019c0)=[{&(0x7f0000000280)="c4", 0x300}], 0x1, 0x0)

16:25:51 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fff}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6)
sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)

16:25:51 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0x0)

16:25:51 executing program 3:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x6, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:25:52 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x9}, @IFLA_BOND_MODE={0x8, 0xa}]}}}]}, 0x44}}, 0x0)

16:25:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

16:25:58 executing program 1:
unshare(0x20400)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

16:25:58 executing program 2:
symlink(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}, [0x0, 0x0, 0x0, 0x4000000000000000]})

16:25:58 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x7fff}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(r0, r1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x6)
sendto$inet(r0, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10)

16:25:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

16:25:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x9}, @IFLA_BOND_MODE={0x8, 0xa}]}}}]}, 0x44}}, 0x0)

16:25:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

16:25:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

16:25:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

16:25:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x50000000002, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0xf0d, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4c, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_INTERVAL, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x6}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0xffffffffffffff3f}]}}]}, 0x7c}}, 0x0)

16:25:58 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x8, 0x9}, @IFLA_BOND_MODE={0x8, 0xa}]}}}]}, 0x44}}, 0x0)

16:25:58 executing program 2:
symlink(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}, [0x0, 0x0, 0x0, 0x4000000000000000]})

16:25:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

[ 1985.404788][ T3621] bridge_slave_1: Caught tx_queue_len zero misconfig
[ 1985.411627][ T3621] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'.
16:26:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="a5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0, 0x2}, {&(0x7f0000000940)='%', 0x1}], 0x2}}], 0x2, 0x400c004)

16:26:04 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

16:26:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x50000000002, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0xf0d, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4c, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_INTERVAL, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x6}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0xffffffffffffff3f}]}}]}, 0x7c}}, 0x0)

16:26:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, 0x0)
timer_gettime(0x0, &(0x7f0000001800))

16:26:04 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000340), 0x4)

16:26:04 executing program 2:
symlink(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}, [0x0, 0x0, 0x0, 0x4000000000000000]})

[ 1991.365164][ T3640] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'.
16:26:04 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0xfffffffffffffffe}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x26}, 0x0, 0x0, 0x0, 0x0})

16:26:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="a5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0, 0x2}, {&(0x7f0000000940)='%', 0x1}], 0x2}}], 0x2, 0x400c004)

16:26:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x50000000002, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0xf0d, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4c, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_INTERVAL, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x6}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0xffffffffffffff3f}]}}]}, 0x7c}}, 0x0)

16:26:04 executing program 2:
symlink(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}})
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}, [0x0, 0x0, 0x0, 0x4000000000000000]})

16:26:04 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000340), 0x4)

16:26:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="a5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0, 0x2}, {&(0x7f0000000940)='%', 0x1}], 0x2}}], 0x2, 0x400c004)

[ 1991.638841][ T3659] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'.
16:26:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x50000000002, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0xf0d, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4c, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_INTERVAL, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x6}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0xffffffffffffff3f}]}}]}, 0x7c}}, 0x0)

[ 1991.803131][T11640] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1991.916488][ T3671] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1992.173023][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1992.181097][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1992.189394][T11640] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 1992.198664][T11640] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1992.209715][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1992.219705][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 1992.229595][T11640] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1992.239187][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1993.162962][T11640] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[ 1993.203028][T11640] cdc_ncm 4-1:1.0: bind() failure
[ 1993.212252][T11640] cdc_ncm 4-1:1.1: bind() failure
[ 1993.225977][T11640] usb 4-1: USB disconnect, device number 28
[ 1993.912898][T11640] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1994.273034][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1994.281290][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1994.289508][T11640] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 1994.298910][T11640] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1994.310010][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1994.319985][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 1994.329866][T11640] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1994.339274][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1994.683273][T11640] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[ 1994.689558][T11640] cdc_ncm 4-1:1.0: bind() failure
[ 1994.701195][T11640] cdc_ncm 4-1:1.1: bind() failure
[ 1994.716018][T11640] usb 4-1: USB disconnect, device number 29
16:26:09 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x50424752})

16:26:09 executing program 2:
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)="a02d47f1fa4f00b3738a8f08", 0xc})

16:26:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000580)="a5", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0, 0x2}, {&(0x7f0000000940)='%', 0x1}], 0x2}}], 0x2, 0x400c004)

16:26:09 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000340), 0x4)

16:26:09 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x101}})

16:26:09 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0xfffffffffffffffe}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x26}, 0x0, 0x0, 0x0, 0x0})

16:26:09 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x101}})

16:26:09 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x10, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000002ffc)=0x98)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

16:26:09 executing program 2:
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)="a02d47f1fa4f00b3738a8f08", 0xc})

16:26:09 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000340), 0x4)

16:26:09 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x101}})

[ 1996.694893][T11640] usb 4-1: new high-speed USB device number 30 using dummy_hcd
16:26:09 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x10, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000002ffc)=0x98)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

[ 1997.093169][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1997.101267][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 1997.109620][T11640] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 1997.118782][T11640] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1997.129894][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1997.139830][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 1997.149667][T11640] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1997.158924][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1998.083038][T11640] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[ 1998.123165][T11640] cdc_ncm 4-1:1.0: bind() failure
[ 1998.132323][T11640] cdc_ncm 4-1:1.1: bind() failure
[ 1998.145770][T11640] usb 4-1: USB disconnect, device number 30
16:26:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x50424752})

16:26:13 executing program 2:
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)="a02d47f1fa4f00b3738a8f08", 0xc})

16:26:13 executing program 4:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

16:26:13 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0xfffffffffffffffe}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x26}, 0x0, 0x0, 0x0, 0x0})

16:26:13 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x101}})

16:26:13 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x10, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000002ffc)=0x98)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

16:26:13 executing program 2:
r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)="a02d47f1fa4f00b3738a8f08", 0xc})

16:26:13 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0xc)
write(r3, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000100030423dcffdf00", 0x1f)

16:26:13 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x10, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000002ffc)=0x98)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0)
close(r0)

16:26:13 executing program 4:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

16:26:13 executing program 2:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

16:26:14 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

[ 2000.893319][T11640] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 2001.253029][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 2001.261187][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 2001.269577][T11640] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 2001.278798][T11640] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2001.290067][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2001.300010][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2001.309882][T11640] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2001.319142][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2002.243196][T11640] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[ 2002.283239][T11640] cdc_ncm 4-1:1.0: bind() failure
[ 2002.292379][T11640] cdc_ncm 4-1:1.1: bind() failure
[ 2002.304358][T11640] usb 4-1: USB disconnect, device number 31
16:26:18 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x50424752})

16:26:18 executing program 4:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

16:26:18 executing program 2:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

16:26:18 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
socket$nl_xfrm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x2c, 0xffffff87, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x2, 0x0, 0x0, [@ipv4={[], [], @dev}]}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

16:26:18 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0xfffffffffffffffe}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x26}, 0x0, 0x0, 0x0, 0x0})

16:26:18 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

16:26:18 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

16:26:18 executing program 2:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

16:26:18 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0)

16:26:19 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

16:26:19 executing program 4:
timer_create(0x0, &(0x7f0000000480)={0x0, 0x12}, &(0x7f0000044000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r0, 0x9205, 0xfffffffffffffffe)
tkill(r1, 0x800000015)

[ 2006.063088][T11640] usb 4-1: new high-speed USB device number 32 using dummy_hcd
16:26:19 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[@loopback]}]}]}}, @icmp=@timestamp}}}}, 0x0)

[ 2006.423091][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 2006.431303][T11640] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[ 2006.439680][T11640] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 2006.449083][T11640] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2006.460190][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2006.470212][T11640] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2006.480083][T11640] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2006.489354][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2007.413048][T11640] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[ 2007.453240][T11640] cdc_ncm 4-1:1.0: bind() failure
[ 2007.462342][T11640] cdc_ncm 4-1:1.1: bind() failure
[ 2007.473890][T11640] usb 4-1: USB disconnect, device number 32
16:26:23 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x50424752})

16:26:23 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f})
epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)

16:26:23 executing program 4:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0x0, 0x108, 0x0, 0x248, 0x108, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'bcsh0\x00', 'ip6gretap0\x00'}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="0e", 0x1)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

16:26:23 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[@loopback]}]}]}}, @icmp=@timestamp}}}}, 0x0)

16:26:23 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0)

16:26:23 executing program 3:
chdir(0x0)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000240)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0)

16:26:23 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f})
epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)

16:26:23 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0)

16:26:23 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[@loopback]}]}]}}, @icmp=@timestamp}}}}, 0x0)

16:26:23 executing program 3:
chdir(0x0)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000240)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0)

16:26:23 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f})
epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)

16:26:23 executing program 3:
chdir(0x0)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000240)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0)

16:26:27 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x0, 0x0, [{[@loopback]}]}]}}, @icmp=@timestamp}}}}, 0x0)

16:26:27 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0)

16:26:27 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f})
epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0)

16:26:27 executing program 3:
chdir(0x0)
symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000240)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x0)

16:26:27 executing program 4:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0x0, 0x108, 0x0, 0x248, 0x108, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'bcsh0\x00', 'ip6gretap0\x00'}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="0e", 0x1)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

16:26:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="130000004200fd03eff904f8ffffffffffffff003600002e"], 0x14}}, 0x0)
r2 = socket(0x10, 0x800000000080003, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x200000000000007}, 0x10)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0)

16:26:27 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0xb})

16:26:27 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b51000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
msync(&(0x7f00007d5000/0x400000)=nil, 0x400000, 0x6)
lstat(0x0, 0x0)

16:26:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

16:26:27 executing program 5:
write(0xffffffffffffffff, &(0x7f0000000140)="0f425060c7b8", 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x1f004, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x7ff}, 0x28, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f)
openat$audio(0xffffffffffffff9c, &(0x7f0000000840)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2014.494440][ T3880] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2014.502804][ T3880] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
16:26:27 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0xb})

16:26:27 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0xb})

[ 2014.679947][ T3880] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2014.688428][ T3880] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
16:26:27 executing program 5:
write(0xffffffffffffffff, &(0x7f0000000140)="0f425060c7b8", 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x1f004, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x7ff}, 0x28, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f)
openat$audio(0xffffffffffffff9c, &(0x7f0000000840)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:26:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

16:26:27 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0xb})

[ 2014.962330][ T3904] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2014.970854][ T3904] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
16:26:28 executing program 5:
write(0xffffffffffffffff, &(0x7f0000000140)="0f425060c7b8", 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x1f004, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x7ff}, 0x28, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f)
openat$audio(0xffffffffffffff9c, &(0x7f0000000840)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:26:28 executing program 4:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0x0, 0x108, 0x0, 0x248, 0x108, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'bcsh0\x00', 'ip6gretap0\x00'}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="0e", 0x1)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

16:26:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="130000004200fd03eff904f8ffffffffffffff003600002e"], 0x14}}, 0x0)
r2 = socket(0x10, 0x800000000080003, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x200000000000007}, 0x10)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0)

16:26:33 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="fc0000001a000700ab0925000900070002ab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000100000000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

16:26:33 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

16:26:33 executing program 5:
write(0xffffffffffffffff, &(0x7f0000000140)="0f425060c7b8", 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x1f004, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U-', 0x7ff}, 0x28, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x8f7a99bbe5b13b0f)
openat$audio(0xffffffffffffff9c, &(0x7f0000000840)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:26:33 executing program 4:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0x0, 0x108, 0x0, 0x248, 0x108, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_team\x00'}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'bcsh0\x00', 'ip6gretap0\x00'}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="0e", 0x1)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0)

16:26:33 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b51000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
msync(&(0x7f00007d5000/0x400000)=nil, 0x400000, 0x6)
lstat(0x0, 0x0)

[ 2020.617432][ T3927] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 2020.625721][ T3927] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 2020.653997][ T3932] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2020.662131][ T3932] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
16:26:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

16:26:34 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

[ 2021.145355][ T3949] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 2021.153947][ T3949] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 2021.179664][ T3952] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2021.188330][ T3952] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
16:26:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca5fa5d01cfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000280)="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", 0xfc)
open(&(0x7f0000000100)='./bus\x00', 0x20000000000b02, 0x0)
epoll_create(0xfd2e)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000004c0), 0x38)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x4, 0x88e}, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0)

16:26:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="130000004200fd03eff904f8ffffffffffffff003600002e"], 0x14}}, 0x0)
r2 = socket(0x10, 0x800000000080003, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x200000000000007}, 0x10)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0)

16:26:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:37 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16:26:37 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:37 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b51000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
msync(&(0x7f00007d5000/0x400000)=nil, 0x400000, 0x6)
lstat(0x0, 0x0)

[ 2024.873257][ T3977] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[ 2024.881472][ T3977] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
16:26:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:38 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:38 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16:26:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

16:26:38 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:38 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:38 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:26:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a4, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="130000004200fd03eff904f8ffffffffffffff003600002e"], 0x14}}, 0x0)
r2 = socket(0x10, 0x800000000080003, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x200000000000007}, 0x10)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000380)=[@op, @op]}], 0x4924aa4, 0x0)

16:26:44 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:44 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:44 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:26:44 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16:26:44 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b51000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
msync(&(0x7f00007d5000/0x400000)=nil, 0x400000, 0x6)
lstat(0x0, 0x0)

16:26:44 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
write$cgroup_int(r1, &(0x7f0000000040)=0x4000000000000200, 0x12)

16:26:44 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:26:44 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)
close(r1)

16:26:44 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:26:44 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)
close(r1)

16:26:44 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x80000000, 0x0, "4600379289554429b2f0016d6608a840baf96fc3948eaa3f"})

16:26:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:26:48 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000080))
r3 = dup3(r0, r1, 0x0)
dup2(r3, r2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)

16:26:48 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31a103b7f95f7b8fb9e0fceee31ad40900dc1df302e4a9e396a870605838b580244dbe73fa0d8d00b0c3c2423b9c12c49452b7acdc2c1d289f6e5eca7747bd30324cd13d9a9655a4f632e898db726c2169010e574d25e65504af9770a63b0582ee23000000000719b58fbd4c4208", 0x23e, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}})

16:26:48 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000480)={0x3000000000000000, 0xc2bc05380442d3ec})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

16:26:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x80000000, 0x0, "4600379289554429b2f0016d6608a840baf96fc3948eaa3f"})

16:26:48 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)
close(r1)

16:26:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x80000000, 0x0, "4600379289554429b2f0016d6608a840baf96fc3948eaa3f"})

16:26:48 executing program 5:
r0 = memfd_create(&(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
write$sndseq(r0, &(0x7f0000000080), 0x67e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x800)
close(r1)

16:26:48 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31a103b7f95f7b8fb9e0fceee31ad40900dc1df302e4a9e396a870605838b580244dbe73fa0d8d00b0c3c2423b9c12c49452b7acdc2c1d289f6e5eca7747bd30324cd13d9a9655a4f632e898db726c2169010e574d25e65504af9770a63b0582ee23000000000719b58fbd4c4208", 0x23e, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}})

16:26:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x80000000, 0x0, "4600379289554429b2f0016d6608a840baf96fc3948eaa3f"})

16:26:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:26:48 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x32314142}})

16:26:48 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31a103b7f95f7b8fb9e0fceee31ad40900dc1df302e4a9e396a870605838b580244dbe73fa0d8d00b0c3c2423b9c12c49452b7acdc2c1d289f6e5eca7747bd30324cd13d9a9655a4f632e898db726c2169010e574d25e65504af9770a63b0582ee23000000000719b58fbd4c4208", 0x23e, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}})

16:26:55 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x227b, &(0x7f00000000c0))

16:26:55 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000200))

16:26:55 executing program 2:
syz_usb_connect(0x1, 0xe1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x8d, 0x2e, 0x8, 0xc2e, 0x720, 0x43fe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x1, 0x31, 0xcf, 0x5, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

16:26:55 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x32314142}})

16:26:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:26:55 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)="080000000000000037595409d020ee89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf31a103b7f95f7b8fb9e0fceee31ad40900dc1df302e4a9e396a870605838b580244dbe73fa0d8d00b0c3c2423b9c12c49452b7acdc2c1d289f6e5eca7747bd30324cd13d9a9655a4f632e898db726c2169010e574d25e65504af9770a63b0582ee23000000000719b58fbd4c4208", 0x23e, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}})

16:26:55 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000200))

16:26:55 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x32314142}})

16:26:55 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000c00)=""/246)
r2 = epoll_create(0xab7f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
dup3(r1, r0, 0x0)

16:26:55 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2042.803486][T16697] usb 3-1: new low-speed USB device number 24 using dummy_hcd
16:26:55 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000200))

16:26:55 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x32314142}})

[ 2043.165136][T16697] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[ 2043.173959][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2043.184259][T16697] usb 3-1: config 0 has no interface number 0
[ 2043.190466][T16697] usb 3-1: config 0 interface 123 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[ 2043.200768][T16697] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=43.fe
[ 2043.210000][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2043.222765][T16697] usb 3-1: config 0 descriptor??
[ 2043.266750][T16697] metro_usb 3-1:0.123: Metrologic USB to Serial converter detected
[ 2043.277601][T16697] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[ 2043.467827][T16697] usb 3-1: USB disconnect, device number 24
[ 2043.477833][T16697] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[ 2043.488507][T16697] metro_usb 3-1:0.123: device disconnected
[ 2044.232789][ T1255] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[ 2044.592948][ T1255] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[ 2044.601198][ T1255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2044.611588][ T1255] usb 3-1: config 0 has no interface number 0
[ 2044.617913][ T1255] usb 3-1: config 0 interface 123 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[ 2044.628216][ T1255] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=43.fe
[ 2044.637498][ T1255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.647465][ T1255] usb 3-1: config 0 descriptor??
[ 2044.696187][ T1255] metro_usb 3-1:0.123: Metrologic USB to Serial converter detected
[ 2044.707492][ T1255] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[ 2044.895051][ T1255] usb 3-1: USB disconnect, device number 25
[ 2044.904009][ T1255] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[ 2044.914874][ T1255] metro_usb 3-1:0.123: device disconnected
16:27:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x227b, &(0x7f00000000c0))

16:27:01 executing program 5:
unshare(0x20400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0xffff, 0x4)

16:27:01 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000200))

16:27:01 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000c00)=""/246)
r2 = epoll_create(0xab7f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
dup3(r1, r0, 0x0)

16:27:01 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000007300)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0)

16:27:01 executing program 2:
syz_usb_connect(0x1, 0xe1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x8d, 0x2e, 0x8, 0xc2e, 0x720, 0x43fe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x1, 0x31, 0xcf, 0x5, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

16:27:02 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000007300)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0)

16:27:02 executing program 5:
unshare(0x20400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0xffff, 0x4)

16:27:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0xc0010112}]})

16:27:02 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000c00)=""/246)
r2 = epoll_create(0xab7f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
dup3(r1, r0, 0x0)

[ 2049.142827][ T1255] usb 3-1: new low-speed USB device number 26 using dummy_hcd
16:27:02 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000007300)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0)

16:27:02 executing program 5:
unshare(0x20400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0xffff, 0x4)

16:27:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0xc0010112}]})

[ 2049.503173][ T1255] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[ 2049.511484][ T1255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2049.521958][ T1255] usb 3-1: config 0 has no interface number 0
[ 2049.529733][ T1255] usb 3-1: config 0 interface 123 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[ 2049.540201][ T1255] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=43.fe
[ 2049.549677][ T1255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2049.559374][ T1255] usb 3-1: config 0 descriptor??
[ 2049.606117][ T1255] metro_usb 3-1:0.123: Metrologic USB to Serial converter detected
[ 2049.617320][ T1255] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[ 2049.810951][ T1255] usb 3-1: USB disconnect, device number 26
[ 2049.820421][ T1255] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[ 2049.831356][ T1255] metro_usb 3-1:0.123: device disconnected
16:27:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x227b, &(0x7f00000000c0))

16:27:06 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000c00)=""/246)
r2 = epoll_create(0xab7f)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
dup3(r1, r0, 0x0)

16:27:06 executing program 5:
unshare(0x20400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0xffff, 0x4)

16:27:06 executing program 2:
syz_usb_connect(0x1, 0xe1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x8d, 0x2e, 0x8, 0xc2e, 0x720, 0x43fe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x1, 0x31, 0xcf, 0x5, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

16:27:06 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000007300)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0)

16:27:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0xc0010112}]})

16:27:06 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0)

16:27:06 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0xc0010112}]})

16:27:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r4, 0xff84cdbd1ad1637, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)

16:27:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130009006900001700000000ab00804817000000b793000000000000190001c007000000007774000400000000000000ef38bf461e", 0x39}], 0x1)

[ 2053.385008][T16697] usb 3-1: new low-speed USB device number 27 using dummy_hcd
16:27:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r4, 0xff84cdbd1ad1637, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)

16:27:06 executing program 0:
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0xd5)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb)

16:27:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130009006900001700000000ab00804817000000b793000000000000190001c007000000007774000400000000000000ef38bf461e", 0x39}], 0x1)

[ 2053.553095][ T1255] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 2053.773308][T16697] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[ 2053.782007][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2053.792991][T16697] usb 3-1: config 0 has no interface number 0
[ 2053.799208][T16697] usb 3-1: config 0 interface 123 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[ 2053.802842][ T1255] usb 4-1: Using ep0 maxpacket: 8
[ 2053.809539][T16697] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=43.fe
[ 2053.824050][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2053.836088][T16697] usb 3-1: config 0 descriptor??
[ 2053.885981][T16697] metro_usb 3-1:0.123: Metrologic USB to Serial converter detected
[ 2053.899502][T16697] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[ 2053.935173][ T1255] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[ 2053.943536][ T1255] usb 4-1: config 0 has no interface number 0
[ 2053.949770][ T1255] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[ 2053.959263][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2053.971533][ T1255] usb 4-1: config 0 descriptor??
[ 2054.018712][ T1255] go7007 4-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2
[ 2054.028665][ T1255] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin"
[ 2054.041653][ T1255] go7007: probe of 4-1:0.20 failed with error -12
[ 2054.091611][ T1255] usb 3-1: USB disconnect, device number 27
[ 2054.101472][ T1255] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[ 2054.112140][ T1255] metro_usb 3-1:0.123: device disconnected
[ 2054.216046][T11640] usb 4-1: USB disconnect, device number 33
[ 2054.992847][T11640] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 2055.232814][T11640] usb 4-1: Using ep0 maxpacket: 8
[ 2055.352959][T11640] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[ 2055.361317][T11640] usb 4-1: config 0 has no interface number 0
[ 2055.367979][T11640] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[ 2055.377461][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2055.387157][T11640] usb 4-1: config 0 descriptor??
[ 2055.438484][T11640] go7007 4-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2
[ 2055.448651][T11640] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin"
[ 2055.459488][T11640] go7007: probe of 4-1:0.20 failed with error -12
[ 2055.635569][T11640] usb 4-1: USB disconnect, device number 34
16:27:12 executing program 1:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x227b, &(0x7f00000000c0))

16:27:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r4, 0xff84cdbd1ad1637, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)

16:27:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130009006900001700000000ab00804817000000b793000000000000190001c007000000007774000400000000000000ef38bf461e", 0x39}], 0x1)

16:27:12 executing program 0:
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0xd5)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb)

16:27:12 executing program 2:
syz_usb_connect(0x1, 0xe1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x8d, 0x2e, 0x8, 0xc2e, 0x720, 0x43fe, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x1, 0x31, 0xcf, 0x5, 0x0, [], [{{0x7, 0x5, 0x81, 0x2}}]}}]}}]}}, 0x0)

16:27:12 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0)

16:27:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x18, r4, 0xff84cdbd1ad1637, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)

16:27:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130009006900001700000000ab00804817000000b793000000000000190001c007000000007774000400000000000000ef38bf461e", 0x39}], 0x1)

16:27:12 executing program 0:
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0xd5)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb)

16:27:12 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
listen(r1, 0xffffffffefffffff)

16:27:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

[ 2059.692864][T11640] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 2059.693467][T16697] usb 3-1: new low-speed USB device number 28 using dummy_hcd
16:27:12 executing program 0:
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0xd5)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb)

[ 2059.932995][T11640] usb 4-1: Using ep0 maxpacket: 8
[ 2060.052997][T11640] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[ 2060.061337][T11640] usb 4-1: config 0 has no interface number 0
[ 2060.067841][T11640] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[ 2060.077112][T11640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2060.087121][T11640] usb 4-1: config 0 descriptor??
[ 2060.113131][T16697] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[ 2060.121489][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.128540][T11640] go7007 4-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2
[ 2060.132118][T16697] usb 3-1: config 0 has no interface number 0
[ 2060.141332][T11640] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin"
[ 2060.147443][T16697] usb 3-1: config 0 interface 123 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[ 2060.158050][T11640] go7007: probe of 4-1:0.20 failed with error -12
[ 2060.168029][T16697] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=43.fe
[ 2060.183723][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2060.193808][T16697] usb 3-1: config 0 descriptor??
[ 2060.236213][T16697] metro_usb 3-1:0.123: Metrologic USB to Serial converter detected
[ 2060.247423][T16697] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[ 2060.334823][T11640] usb 4-1: USB disconnect, device number 35
[ 2060.441886][ T1255] usb 3-1: USB disconnect, device number 28
[ 2060.450976][ T1255] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[ 2060.461708][ T1255] metro_usb 3-1:0.123: device disconnected
[ 2061.205003][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
16:27:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

16:27:18 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
listen(r1, 0xffffffffefffffff)

16:27:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

16:27:18 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0)

16:27:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0)

16:27:18 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0))
sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x37}], 0x18}], 0x4924924924927e1, 0x0)

16:27:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

16:27:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

16:27:18 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
listen(r1, 0xffffffffefffffff)

16:27:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0)

16:27:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

16:27:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0)

[ 2066.042877][ T1255] usb 4-1: new high-speed USB device number 36 using dummy_hcd
16:27:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000686ff4)={0x10, 0x0, 0x2}, 0xc)
dup3(r0, r1, 0x0)

16:27:19 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4)
listen(r1, 0xffffffffefffffff)

16:27:19 executing program 4:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

[ 2066.282940][ T1255] usb 4-1: Using ep0 maxpacket: 8
[ 2066.403108][ T1255] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[ 2066.411322][ T1255] usb 4-1: config 0 has no interface number 0
[ 2066.418066][ T1255] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[ 2066.427523][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.440285][ T1255] usb 4-1: config 0 descriptor??
[ 2066.501033][ T1255] go7007 4-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2
[ 2066.510822][ T1255] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin"
[ 2066.521646][ T1255] go7007: probe of 4-1:0.20 failed with error -12
[ 2066.695296][ T1255] usb 4-1: USB disconnect, device number 36
16:27:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0)

16:27:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000340)="0800b5055e0bcfe87b0071")
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x4b, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

16:27:25 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0))
sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x37}], 0x18}], 0x4924924924927e1, 0x0)

16:27:25 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:25 executing program 4:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

16:27:25 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xc, 0x67, 0xce, 0x8, 0xeb1, 0x7007, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x0, 0x5a, 0x5b, 0xa3}}]}}]}}, 0x0)

16:27:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000340)="0800b5055e0bcfe87b0071")
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x4b, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

16:27:25 executing program 2:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

16:27:25 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000340)="0800b5055e0bcfe87b0071")
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x4b, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

16:27:25 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:25 executing program 4:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

16:27:25 executing program 2:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

[ 2072.353309][ T1255] usb 4-1: new high-speed USB device number 37 using dummy_hcd
16:27:25 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:25 executing program 4:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

[ 2072.593093][ T1255] usb 4-1: Using ep0 maxpacket: 8
[ 2072.713184][ T1255] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[ 2072.721672][ T1255] usb 4-1: config 0 has no interface number 0
[ 2072.728087][ T1255] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[ 2072.737405][ T1255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2072.750338][ T1255] usb 4-1: config 0 descriptor??
[ 2072.799146][ T1255] go7007 4-1:0.20: Direct firmware load for go7007/go7007fw.bin failed with error -2
[ 2072.809126][ T1255] WIS Matrix Revolution or compatible: unable to load firmware from file "go7007/go7007fw.bin"
[ 2072.819915][ T1255] go7007: probe of 4-1:0.20 failed with error -12
[ 2073.000153][ T1255] usb 4-1: USB disconnect, device number 37
16:27:29 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0))
sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x37}], 0x18}], 0x4924924924927e1, 0x0)

16:27:29 executing program 2:
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r0 = gettid()
pipe(&(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
ptrace(0x4206, r0)
tkill(r0, 0x800000009)

16:27:29 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x0, 0x6}, {0x1}]})

16:27:29 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000340)="0800b5055e0bcfe87b0071")
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x4b, 0x0, <r2=>0xffffffffffffffff})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)

16:27:29 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:29 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x108, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp})

16:27:29 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:29 executing program 2:
syz_usb_connect(0x0, 0x156, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8b, 0x17, 0x34, 0x2008, 0x525, 0xa4a4, 0x4b4a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0xe2, 0x82, 0xaf, 0x0, [], [{{0x7, 0x5, 0x81, 0x400000005}}]}}]}}]}}, 0x0)

16:27:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x0, 0x6}, {0x1}]})

16:27:29 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4030000, 0x26}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

16:27:29 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x108, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp})

[ 2076.893042][T16697] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 2077.132784][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 2077.252878][T16697] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 2077.261385][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2077.271695][T16697] usb 3-1: config 0 has no interface number 0
[ 2077.277924][T16697] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2077.289195][T16697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a
[ 2077.298451][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2077.308078][T16697] usb 3-1: config 0 descriptor??
[ 2077.356699][T16697] usbtest 3-1:0.251: couldn't get endpoints, -22
[ 2077.363417][T16697] usbtest: probe of 3-1:0.251 failed with error -22
[ 2077.556282][T16697] usb 3-1: USB disconnect, device number 29
[ 2078.342939][T16697] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 2078.582866][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 2078.702983][T16697] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 2078.711523][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2078.721962][T16697] usb 3-1: config 0 has no interface number 0
[ 2078.728288][T16697] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2078.739539][T16697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a
[ 2078.748914][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2078.758428][T16697] usb 3-1: config 0 descriptor??
[ 2078.807727][T16697] usbtest 3-1:0.251: couldn't get endpoints, -22
[ 2078.814410][T16697] usbtest: probe of 3-1:0.251 failed with error -22
[ 2079.005270][T16697] usb 3-1: USB disconnect, device number 30
16:27:33 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0))
sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x37}], 0x18}], 0x4924924924927e1, 0x0)

16:27:33 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10)
setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)

16:27:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x0, 0x6}, {0x1}]})

16:27:33 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x108, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp})

16:27:33 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4030000, 0x26}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

16:27:33 executing program 2:
syz_usb_connect(0x0, 0x156, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8b, 0x17, 0x34, 0x2008, 0x525, 0xa4a4, 0x4b4a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0xe2, 0x82, 0xaf, 0x0, [], [{{0x7, 0x5, 0x81, 0x400000005}}]}}]}}]}}, 0x0)

16:27:33 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x108, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp})

16:27:33 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000003c0)=[@acquire, @request_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0})

16:27:33 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4030000, 0x26}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

16:27:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x40000001, 0x0, 0x6}, {0x1}]})

16:27:33 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000003c0)=[@acquire, @request_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0})

[ 2080.832902][T16697] usb 3-1: new high-speed USB device number 31 using dummy_hcd
16:27:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x1c0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x198, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x188, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1c}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_LINK={0xfffffdb5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x3}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0xfffffffffffffd46}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x1c0}}, 0x0)

[ 2081.001000][ T4545] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[ 2081.009296][ T4545] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[ 2081.018404][ T4545] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2081.082900][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 2081.233096][T16697] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 2081.241348][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2081.251693][T16697] usb 3-1: config 0 has no interface number 0
[ 2081.257944][T16697] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2081.269286][T16697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a
[ 2081.278539][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2081.288122][T16697] usb 3-1: config 0 descriptor??
[ 2081.336387][T16697] usbtest 3-1:0.251: couldn't get endpoints, -22
[ 2081.343142][T16697] usbtest: probe of 3-1:0.251 failed with error -22
[ 2081.539919][T16697] usb 3-1: USB disconnect, device number 31
16:27:39 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x34}}, 0x0)

16:27:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4030000, 0x26}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)

16:27:39 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000003c0)=[@acquire, @request_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0})

16:27:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x1c0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x198, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x188, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1c}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_LINK={0xfffffdb5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x3}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0xfffffffffffffd46}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x1c0}}, 0x0)

16:27:39 executing program 2:
syz_usb_connect(0x0, 0x156, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8b, 0x17, 0x34, 0x2008, 0x525, 0xa4a4, 0x4b4a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0xe2, 0x82, 0xaf, 0x0, [], [{{0x7, 0x5, 0x81, 0x400000005}}]}}]}}]}}, 0x0)

16:27:39 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES64=r1], 0x1c}, 0x0)
close(r0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES64=r3], 0x1c}, 0x0)
close(r2)
r4 = socket$unix(0x1, 0x5, 0x0)
close(r4)

[ 2086.878504][ T4559] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[ 2086.887113][ T4559] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[ 2086.897639][ T4559] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'.
16:27:40 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f00000003c0)=[@acquire, @request_death={0x400c630f, 0x0, 0x2}], 0x0, 0x0, 0x0})

16:27:40 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x34}}, 0x0)

16:27:40 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x202)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x73e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

16:27:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x1c0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x198, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x188, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1c}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_LINK={0xfffffdb5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x3}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0xfffffffffffffd46}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x1c0}}, 0x0)

16:27:40 executing program 4:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @vbi={0x0, 0x0, 0x55595659}})

[ 2087.152979][T16697] usb 3-1: new high-speed USB device number 32 using dummy_hcd
16:27:40 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x34}}, 0x0)

16:27:40 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x202)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x73e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

[ 2087.285808][ T4587] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[ 2087.294418][ T4587] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[ 2087.302799][ T4587] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'.
16:27:40 executing program 4:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @vbi={0x0, 0x0, 0x55595659}})

[ 2087.434756][T16697] usb 3-1: Using ep0 maxpacket: 8
16:27:40 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv6_newrule={0x34, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x34}}, 0x0)

16:27:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x1c0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x198, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x188, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1c}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_LINK={0xfffffdb5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x3}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0xfffffffffffffd46}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x1c0}}, 0x0)

[ 2087.565134][T16697] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 2087.573955][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2087.584236][T16697] usb 3-1: config 0 has no interface number 0
[ 2087.590441][T16697] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2087.601683][T16697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a
[ 2087.610884][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2087.658760][ T4601] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[ 2087.667275][ T4601] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[ 2087.675508][ T4601] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2087.734034][T16697] usb 3-1: config 0 descriptor??
[ 2087.778566][T16697] usbtest 3-1:0.251: couldn't get endpoints, -22
[ 2087.785321][T16697] usbtest: probe of 3-1:0.251 failed with error -22
[ 2087.981710][ T1255] usb 3-1: USB disconnect, device number 32
16:27:41 executing program 2:
syz_usb_connect(0x0, 0x156, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8b, 0x17, 0x34, 0x2008, 0x525, 0xa4a4, 0x4b4a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0xe2, 0x82, 0xaf, 0x0, [], [{{0x7, 0x5, 0x81, 0x400000005}}]}}]}}]}}, 0x0)

[ 2088.802805][T16697] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2089.042846][T16697] usb 3-1: Using ep0 maxpacket: 8
[ 2089.162948][T16697] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[ 2089.171251][T16697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2089.181610][T16697] usb 3-1: config 0 has no interface number 0
[ 2089.187839][T16697] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2089.199086][T16697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a
[ 2089.208401][T16697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2089.224067][T16697] usb 3-1: config 0 descriptor??
[ 2089.266743][T16697] usbtest 3-1:0.251: couldn't get endpoints, -22
[ 2089.273435][T16697] usbtest: probe of 3-1:0.251 failed with error -22
[ 2089.470687][ T1255] usb 3-1: USB disconnect, device number 33
16:27:47 executing program 1:
r0 = memfd_create(&(0x7f0000000580)='/d-\x1b\xb3\x82\xf9/J\xb0p*\xd8\x00\xea\x03\x83\xd8\x16h\xeb\xb2\xc4\xfbl\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{\xa9\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\x02\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9e\xe8Q\xd3\xe9S0\xb9v\xa7\x98\xab\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xad\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa331\x19\x8a\xc81\xa1\xe6\xc2)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Uo\xd9\xa0\xe0`\xfcB%\x9c\xbc\x94\'\xc8\xd1\xab \xb7i\xf1\x9dT\x14\xbdg\x05\x9eNU\x9a\xa6\x84B\x92\n*\xc1\xb5\x17\xb4\x15\x9bE!\xfdY\xb9L\xdb\xd7\x1e\xf0x\x9a\x99H+ \xc9\xa3-c\xa5\r\xc5\xe2I\xcb\xa5\x96\xd9`\x80\xd3\x9e%\x1fr\xbd\xbc\x88\xff{\xf0E\xbf+\xa7\xf0B\xbd\x96?\xe8\x8b\xec@\x19\x96\xcbn2\xcc\x9bD\xb1\xee\xec\xa3\xe4\x93#\xe8\xcb\x91\x84oe\x8fb\xe2\x9bcI\a\xe8< 8\x7f\x94\xc0Q\xb3\x90\xd2W\xfa\xc1\x89\xca\xd4\x81SM,]`+\ah\xd8\xa4\x00\x00\x00\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xffffffffffffffda}, 0x50)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000000))

16:27:47 executing program 4:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @vbi={0x0, 0x0, 0x55595659}})

16:27:47 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62d3c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee4e82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d001fe92b08c3f7b8e1596417d7dcd645413be210000020000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf2fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x202)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x73e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

16:27:47 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:27:47 executing program 0:
r0 = eventfd(0x0)
readv(r0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001580)=""/175, 0xaf}], 0x2)

16:27:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x74e001, 0x0, 0x2}})

16:27:47 executing program 5:
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x202)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x73e)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

16:27:47 executing program 4:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @vbi={0x0, 0x0, 0x55595659}})

16:27:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x74e001, 0x0, 0x2}})

16:27:47 executing program 0:
r0 = eventfd(0x0)
readv(r0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001580)=""/175, 0xaf}], 0x2)

16:27:47 executing program 0:
r0 = eventfd(0x0)
readv(r0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001580)=""/175, 0xaf}], 0x2)

16:27:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0xfffffffffffffffd, 0x31828211)

16:27:54 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:27:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x74e001, 0x0, 0x2}})

16:27:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
r6 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0)
fallocate(r6, 0x0, 0x2000421, 0x9)
write(r6, &(0x7f0000002000)='/', 0x1)
sendfile(r6, r6, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16:27:54 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0xfffffffffffffffd, 0x31828211)

16:27:54 executing program 0:
r0 = eventfd(0x0)
readv(r0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001580)=""/175, 0xaf}], 0x2)

16:27:54 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:27:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x74e001, 0x0, 0x2}})

16:27:54 executing program 0:
r0 = socket(0x22, 0x2, 0x3)
close(r0)

16:27:54 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0xfffffffffffffffd, 0x31828211)

16:27:54 executing program 0:
r0 = socket(0x22, 0x2, 0x3)
close(r0)

16:27:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\xff\x00\x00\x80\x00\x00')
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000140)='\x00')

16:27:54 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
r6 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0)
fallocate(r6, 0x0, 0x2000421, 0x9)
write(r6, &(0x7f0000002000)='/', 0x1)
sendfile(r6, r6, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16:28:01 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:28:01 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0xfffffffffffffffd, 0x31828211)

16:28:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\xff\x00\x00\x80\x00\x00')
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000140)='\x00')

16:28:01 executing program 0:
r0 = socket(0x22, 0x2, 0x3)
close(r0)

16:28:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
r6 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0)
fallocate(r6, 0x0, 0x2000421, 0x9)
write(r6, &(0x7f0000002000)='/', 0x1)
sendfile(r6, r6, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16:28:01 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:28:01 executing program 0:
r0 = socket(0x22, 0x2, 0x3)
close(r0)

16:28:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\xff\x00\x00\x80\x00\x00')
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000140)='\x00')

16:28:01 executing program 5:
perf_event_open(&(0x7f0000000400)={0x8, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:28:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(r1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
r6 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0)
fallocate(r6, 0x0, 0x2000421, 0x9)
write(r6, &(0x7f0000002000)='/', 0x1)
sendfile(r6, r6, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16:28:01 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
futimesat(r1, 0x0, &(0x7f0000000140)={{}, {0x77359400}})

16:28:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\xff\x00\x00\x80\x00\x00')
ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000140)='\x00')

16:28:08 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:28:08 executing program 5:
perf_event_open(&(0x7f0000000400)={0x8, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:28:08 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
futimesat(r1, 0x0, &(0x7f0000000140)={{}, {0x77359400}})

16:28:08 executing program 2:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:08 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$int_in(r0, 0x8000008004500f, 0x0)

16:28:08 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

16:28:08 executing program 5:
perf_event_open(&(0x7f0000000400)={0x8, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:28:08 executing program 2:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:08 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
futimesat(r1, 0x0, &(0x7f0000000140)={{}, {0x77359400}})

16:28:08 executing program 5:
perf_event_open(&(0x7f0000000400)={0x8, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:28:09 executing program 2:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:09 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$int_in(r0, 0x8000008004500f, 0x0)

16:28:15 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
futimesat(r1, 0x0, &(0x7f0000000140)={{}, {0x77359400}})

16:28:15 executing program 5:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:15 executing program 2:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:15 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$int_in(r0, 0x8000008004500f, 0x0)

16:28:15 executing program 3:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:15 executing program 5:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540)=0xffff, 0x118)
recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
shutdown(r1, 0x0)

16:28:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x60, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x81}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff}}}]}}]}, 0x8c}}, 0x0)

16:28:15 executing program 3:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:15 executing program 3:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:15 executing program 4:
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$int_in(r0, 0x8000008004500f, 0x0)

16:28:15 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf01, 0x0)

16:28:15 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0xdfffffff, 0x800}, 0x18)

16:28:15 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x60, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x81}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff}}}]}}]}, 0x8c}}, 0x0)

16:28:15 executing program 5:
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f8142d6c573a1b3a9dd18c64060030c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7)
open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00'])

16:28:16 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x511, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:28:16 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0xdfffffff, 0x800}, 0x18)

16:28:16 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf01, 0x0)

16:28:21 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540)=0xffff, 0x118)
recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
shutdown(r1, 0x0)

16:28:21 executing program 4:
setrlimit(0x7, &(0x7f0000000000))
mq_open(&(0x7f00000003c0)=',\x00', 0x0, 0x0, 0x0)

16:28:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x60, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x81}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff}}}]}}]}, 0x8c}}, 0x0)

16:28:21 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0xdfffffff, 0x800}, 0x18)

16:28:21 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x511, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:28:21 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf01, 0x0)

16:28:21 executing program 3:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0xdfffffff, 0x800}, 0x18)

16:28:21 executing program 4:
setrlimit(0x7, &(0x7f0000000000))
mq_open(&(0x7f00000003c0)=',\x00', 0x0, 0x0, 0x0)

16:28:21 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x511, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:28:21 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x60, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x81}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff}}}]}}]}, 0x8c}}, 0x0)

16:28:22 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf01, 0x0)

16:28:22 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="0d2dac673a61", @random="1807064f09fc", [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x57, @broadcast, @empty, @random="0383792a55cd", @local}}}}, 0x0)

16:28:27 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x511, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

16:28:27 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540)=0xffff, 0x118)
recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
shutdown(r1, 0x0)

16:28:27 executing program 4:
setrlimit(0x7, &(0x7f0000000000))
mq_open(&(0x7f00000003c0)=',\x00', 0x0, 0x0, 0x0)

16:28:27 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000240))
timer_create(0x3, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

16:28:27 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="0d2dac673a61", @random="1807064f09fc", [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x57, @broadcast, @empty, @random="0383792a55cd", @local}}}}, 0x0)

16:28:27 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x11')

16:28:28 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000240))
timer_create(0x3, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

16:28:28 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x6}})

16:28:28 executing program 4:
setrlimit(0x7, &(0x7f0000000000))
mq_open(&(0x7f00000003c0)=',\x00', 0x0, 0x0, 0x0)

16:28:28 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="0d2dac673a61", @random="1807064f09fc", [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x57, @broadcast, @empty, @random="0383792a55cd", @local}}}}, 0x0)

16:28:28 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x11')

16:28:28 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000240))
timer_create(0x3, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

16:28:28 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880467fb0a000200400ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

[ 2135.434680][ T4999] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'.
16:28:34 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540)=0xffff, 0x118)
recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
shutdown(r1, 0x0)

16:28:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x6}})

16:28:34 executing program 3:
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="0d2dac673a61", @random="1807064f09fc", [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x57, @broadcast, @empty, @random="0383792a55cd", @local}}}}, 0x0)

16:28:34 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x11')

16:28:34 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000240))
timer_create(0x3, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, r1+30000000}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0)

16:28:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880467fb0a000200400ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

[ 2141.324228][ T5013] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'.
16:28:34 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x11')

16:28:34 executing program 3:
unshare(0x28020400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
ppoll(&(0x7f0000000080)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0)

16:28:34 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x6}})

16:28:34 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:28:34 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880467fb0a000200400ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

[ 2141.571596][ T5030] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'.
16:28:34 executing program 3:
unshare(0x28020400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
ppoll(&(0x7f0000000080)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0)

16:28:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x0, 0x6}})

16:28:40 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880467fb0a000200400ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

16:28:40 executing program 2:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000440)='./file0\x00')
symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)

16:28:40 executing program 3:
unshare(0x28020400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
ppoll(&(0x7f0000000080)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0)

16:28:40 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:28:40 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 2147.650785][ T5052] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'.
16:28:40 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='GPL.cpuset-\x82\'posix_acl_access\x00')
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

16:28:40 executing program 5:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
lseek(r0, 0x0, 0x3)

16:28:40 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x10, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@routing={0x3a}], @icmpv6=@echo_request}}}}}, 0x0)

16:28:40 executing program 3:
unshare(0x28020400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
ppoll(&(0x7f0000000080)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0)

[ 2147.964545][   T30] audit: type=1804 audit(1571761721.024:86): pid=5074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm=47504C2E6370757365742D8227706F name="/newroot/2552/file0/bus" dev="ramfs" ino=347592 res=1
16:28:41 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000000)='\x00')

16:28:41 executing program 5:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
lseek(r0, 0x0, 0x3)

16:28:41 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='GPL.cpuset-\x82\'posix_acl_access\x00')
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

16:28:41 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

[ 2148.258773][   T30] audit: type=1804 audit(1571761721.314:87): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm=47504C2E6370757365742D8227706F name="/newroot/2553/file0/bus" dev="ramfs" ino=347028 res=1
16:28:41 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000000)='\x00')

16:28:41 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 2151.443093][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2151.449119][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2151.455513][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2151.461577][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2151.468082][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2151.474112][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2151.480153][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2151.486395][    C0] protocol 88fb is buggy, dev hsr_slave_1
16:28:45 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='GPL.cpuset-\x82\'posix_acl_access\x00')
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

16:28:45 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:28:45 executing program 5:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
lseek(r0, 0x0, 0x3)

16:28:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:45 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000000)='\x00')

16:28:45 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 2152.148938][   T30] audit: type=1804 audit(1571761725.204:88): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm=47504C2E6370757365742D8227706F name="/newroot/2554/file0/bus" dev="ramfs" ino=347734 res=1
16:28:45 executing program 5:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
lseek(r0, 0x0, 0x3)

16:28:45 executing program 2:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='GPL.cpuset-\x82\'posix_acl_access\x00')
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

16:28:45 executing program 3:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c')
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000000)='\x00')

16:28:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

[ 2152.400726][   T30] audit: type=1804 audit(1571761725.454:89): pid=5134 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm=47504C2E6370757365742D8227706F name="/newroot/2555/file0/bus" dev="ramfs" ino=347782 res=1
16:28:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:45 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:45 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

[ 2157.682985][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2157.689014][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2157.695304][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2157.701280][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2157.707559][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2157.713589][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2157.719659][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2157.725846][    C0] protocol 88fb is buggy, dev hsr_slave_1
16:28:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff507000000000001b9c7000000000000095000000000000007ae941a413c93a368d1f61dc8a2271112d65f63df864c78b07d9ff0af86bf4aa35339f4b382c4caf9db6fa7a9b857b7aabacaaf9d82386142ab3c3b962dd"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

16:28:51 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
lseek(r0, 0x7fffffffffffd, 0x1)

16:28:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
lseek(r0, 0x7fffffffffffd, 0x1)

16:28:51 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

16:28:52 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae86, &(0x7f0000000080))
r5 = dup3(r2, r3, 0x0)
dup2(r5, r4)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)

16:28:56 executing program 4:
socket$inet(0x2, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x14, 0x60b, 0x0, 0x0, {0x2, 0xf0ffff, 0x4000}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bbe736863d55a7374efe"}]}, 0x48}}, 0x0)

16:28:56 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x1c04, 0x0)
read(r0, &(0x7f00000001c0)=""/4096, 0x1000)

16:28:56 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
lseek(r0, 0x7fffffffffffd, 0x1)

16:28:56 executing program 2:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16:28:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)

16:28:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae86, &(0x7f0000000080))
r5 = dup3(r2, r3, 0x0)
dup2(r5, r4)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)

16:28:56 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x1c04, 0x0)
read(r0, &(0x7f00000001c0)=""/4096, 0x1000)

16:28:56 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
lseek(r0, 0x7fffffffffffd, 0x1)

16:28:56 executing program 4:
socket$inet(0x2, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x14, 0x60b, 0x0, 0x0, {0x2, 0xf0ffff, 0x4000}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bbe736863d55a7374efe"}]}, 0x48}}, 0x0)

16:28:57 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x1c04, 0x0)
read(r0, &(0x7f00000001c0)=""/4096, 0x1000)

16:28:57 executing program 0:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="2f0000001800030007ff58946fa283bc80200000000400050319856808000100a3c968ce238b7eb6240e65c1881c5f", 0x2f}], 0x1}, 0x0)

16:28:57 executing program 4:
socket$inet(0x2, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x14, 0x60b, 0x0, 0x0, {0x2, 0xf0ffff, 0x4000}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bbe736863d55a7374efe"}]}, 0x48}}, 0x0)

16:28:57 executing program 2:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16:28:57 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae86, &(0x7f0000000080))
r5 = dup3(r2, r3, 0x0)
dup2(r5, r4)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)

[ 2164.178058][ T5232] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
16:28:57 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x1c04, 0x0)
read(r0, &(0x7f00000001c0)=""/4096, 0x1000)

16:28:57 executing program 4:
socket$inet(0x2, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x14, 0x60b, 0x0, 0x0, {0x2, 0xf0ffff, 0x4000}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bbe736863d55a7374efe"}]}, 0x48}}, 0x0)

16:28:57 executing program 0:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="2f0000001800030007ff58946fa283bc80200000000400050319856808000100a3c968ce238b7eb6240e65c1881c5f", 0x2f}], 0x1}, 0x0)

[ 2164.453887][ T5251] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2172.003030][T16697] Bluetooth: hci0: command 0x1003 tx timeout
[ 2172.009307][ T5259] Bluetooth: hci0: sending frame failed (-49)
[ 2174.082803][ T1255] Bluetooth: hci0: command 0x1001 tx timeout
[ 2174.089005][ T5259] Bluetooth: hci0: sending frame failed (-49)
[ 2176.162824][T16697] Bluetooth: hci0: command 0x1009 tx timeout
16:29:13 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)

16:29:13 executing program 3:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16:29:13 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73", 0x30}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

16:29:13 executing program 0:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="2f0000001800030007ff58946fa283bc80200000000400050319856808000100a3c968ce238b7eb6240e65c1881c5f", 0x2f}], 0x1}, 0x0)

16:29:13 executing program 2:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16:29:13 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae86, &(0x7f0000000080))
r5 = dup3(r2, r3, 0x0)
dup2(r5, r4)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)

[ 2180.340963][ T5269] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
16:29:13 executing program 0:
r0 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="2f0000001800030007ff58946fa283bc80200000000400050319856808000100a3c968ce238b7eb6240e65c1881c5f", 0x2f}], 0x1}, 0x0)

16:29:13 executing program 2:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16:29:13 executing program 3:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

[ 2180.570573][ T5283] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
16:29:13 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
stat(&(0x7f0000000000)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1d}}, 0x50)

16:29:13 executing program 3:
r0 = add_key$user(0x0, 0x0, &(0x7f00000002c0)="1975b710bdf6", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7a", 0x7)
accept(r4, 0x0, 0x0)
fchmod(r4, 0x20)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$alg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

16:29:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x457)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_getneigh={0x1b, 0x1e, 0x50b}, 0x20}}, 0x0)

[ 2188.642932][ T1255] Bluetooth: hci0: command 0x1003 tx timeout
[ 2188.649366][ T5259] Bluetooth: hci0: sending frame failed (-49)
[ 2190.722889][T16697] Bluetooth: hci0: command 0x1001 tx timeout
[ 2190.729317][ T5259] Bluetooth: hci0: sending frame failed (-49)
[ 2192.802838][ T1255] Bluetooth: hci0: command 0x1009 tx timeout
16:29:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)

16:29:29 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4002})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

16:29:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x457)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_getneigh={0x1b, 0x1e, 0x50b}, 0x20}}, 0x0)

16:29:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0xfffffffffffffce0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6}})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:29:29 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
stat(&(0x7f0000000000)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1d}}, 0x50)

16:29:29 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="0900000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73", 0x30}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 2196.995887][ T5311] device nr0
 entered promiscuous mode
[ 2197.017614][ T5316] picdev_read: 305 callbacks suppressed
[ 2197.017626][ T5316] kvm: pic: non byte read
[ 2197.030112][ T5316] picdev_write: 116 callbacks suppressed
[ 2197.030126][ T5316] kvm: pic: non byte write
16:29:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x457)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_getneigh={0x1b, 0x1e, 0x50b}, 0x20}}, 0x0)

[ 2197.044245][ T5316] kvm: pic: non byte read
[ 2197.049402][ T5316] kvm: pic: non byte write
[ 2197.059946][ T5316] kvm: pic: non byte read
[ 2197.068484][ T5316] kvm: pic: non byte write
[ 2197.079934][ T5316] kvm: pic: non byte read
[ 2197.094097][ T5316] kvm: pic: non byte write
[ 2197.108423][ T5316] kvm: pic: non byte read
[ 2197.118520][ T5316] kvm: pic: non byte write
[ 2197.126783][ T5316] kvm: pic: non byte read
[ 2197.132330][ T5316] kvm: pic: non byte write
[ 2197.140879][ T5316] kvm: pic: non byte read
[ 2197.146575][ T5316] kvm: pic: non byte write
[ 2197.152953][ T5316] kvm: pic: non byte read
[ 2197.159704][ T5316] kvm: pic: non byte write
[ 2197.166874][ T5316] kvm: pic: non byte read
[ 2197.172300][ T5316] kvm: pic: non byte write
[ 2197.180945][ T5316] kvm: pic: non byte read
[ 2197.186522][ T5316] kvm: pic: non byte write
16:29:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x457)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_getneigh={0x1b, 0x1e, 0x50b}, 0x20}}, 0x0)

[ 2197.249735][ T5311] device nr0
 entered promiscuous mode
16:29:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0xfffffffffffffce0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6}})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:29:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0xfffffffffffffce0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6}})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:29:30 executing program 2:
socket(0x2000000000000021, 0x2, 0x10000000000002)
userfaultfd(0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00')
readv(r0, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1)

16:29:30 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4002})
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')

[ 2197.720443][ T5338] device nr0
 entered promiscuous mode
[ 2201.433196][T26087] Bluetooth: Error in BCSP hdr checksum
[ 2201.693258][T26087] Bluetooth: Error in BCSP hdr checksum
[ 2203.202925][T16697] Bluetooth: hci0: command 0x1003 tx timeout
[ 2203.209191][ T5259] Bluetooth: hci0: sending frame failed (-49)
[ 2205.282803][ T1255] Bluetooth: hci0: command 0x1001 tx timeout
[ 2205.289038][ T5259] Bluetooth: hci0: sending frame failed (-49)
[ 2207.362824][T16697] Bluetooth: hci0: command 0x1009 tx timeout
[ 2211.604775][ T5320] =====================================================
[ 2211.611765][ T5320] BUG: KMSAN: use-after-free in kfree_skb+0x23c/0x4c0
[ 2211.614651][ T5320] CPU: 0 PID: 5320 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0
[ 2211.614651][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2211.634573][ T5320] Call Trace:
[ 2211.634573][ T5320]  dump_stack+0x191/0x1f0
[ 2211.634573][ T5320]  kmsan_report+0x14a/0x2f0
[ 2211.634573][ T5320]  __msan_warning+0x73/0xf0
[ 2211.634573][ T5320]  kfree_skb+0x23c/0x4c0
[ 2211.654676][ T5320]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2211.654676][ T5320]  bcsp_close+0x127/0x1e0
[ 2211.654676][ T5320]  ? bcsp_open+0x5d0/0x5d0
[ 2211.654676][ T5320]  hci_uart_tty_close+0x385/0x410
[ 2211.674529][ T5320]  ? hci_uart_tty_open+0x5a0/0x5a0
[ 2211.674529][ T5320]  tty_ldisc_release+0x5dd/0xd50
[ 2211.674529][ T5320]  tty_release_struct+0x4f/0x1d0
[ 2211.674529][ T5320]  ? tty_unlock+0x82/0x100
[ 2211.694560][ T5320]  tty_release+0x1be2/0x1e80
[ 2211.694560][ T5320]  ? tty_release_struct+0x1d0/0x1d0
[ 2211.694560][ T5320]  __fput+0x4c9/0xba0
[ 2211.694560][ T5320]  ____fput+0x37/0x40
[ 2211.694560][ T5320]  ? fput_many+0x2a0/0x2a0
[ 2211.714532][ T5320]  task_work_run+0x22e/0x2a0
[ 2211.722896][ T5320]  prepare_exit_to_usermode+0x39d/0x4d0
[ 2211.722916][ T5320]  syscall_return_slowpath+0x90/0x610
[ 2211.732747][ T5320]  do_syscall_64+0xdc/0x160
[ 2211.734590][ T5320]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 2211.742683][ T5320] RIP: 0033:0x413a91
[ 2211.742683][ T5320] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2211.762676][ T5320] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 2211.774578][ T5320] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413a91
[ 2211.782687][ T5320] RDX: 0000001b2f720000 RSI: 00000000ffffffff RDI: 0000000000000003
[ 2211.782687][ T5320] RBP: 0000000000000001 R08: 0000000081840bf1 R09: ffffffffffffffff
[ 2211.794538][ T5320] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0
[ 2211.802682][ T5320] R13: 000000000075c9a0 R14: 0000000000760410 R15: 000000000075bfd4
[ 2211.814579][ T5320] 
[ 2211.814579][ T5320] Uninit was created at:
[ 2211.814579][ T5320]  kmsan_internal_poison_shadow+0x60/0x110
[ 2211.822704][ T5320]  kmsan_slab_free+0x8d/0x100
[ 2211.832796][ T5320]  kmem_cache_free+0x2d1/0x2b70
[ 2211.834583][ T5320]  kfree_skb+0x473/0x4c0
[ 2211.834583][ T5320]  hci_cmd_work+0xfd/0x4f0
[ 2211.843287][ T5320]  process_one_work+0x1572/0x1ef0
[ 2211.843287][ T5320]  worker_thread+0x111b/0x2460
[ 2211.854741][ T5320]  kthread+0x4b5/0x4f0
[ 2211.854741][ T5320]  ret_from_fork+0x35/0x40
[ 2211.862695][ T5320] =====================================================
[ 2211.862695][ T5320] Disabling lock debugging due to kernel taint
[ 2211.874610][ T5320] Kernel panic - not syncing: panic_on_warn set ...
[ 2211.882692][ T5320] CPU: 0 PID: 5320 Comm: syz-executor.1 Tainted: G    B             5.4.0-rc3+ #0
[ 2211.892819][ T5320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2211.902695][ T5320] Call Trace:
[ 2211.902695][ T5320]  dump_stack+0x191/0x1f0
[ 2211.902695][ T5320]  panic+0x3c9/0xc1e
[ 2211.914643][ T5320]  kmsan_report+0x2e8/0x2f0
[ 2211.914643][ T5320]  __msan_warning+0x73/0xf0
[ 2211.922874][ T5320]  kfree_skb+0x23c/0x4c0
[ 2211.925426][ T5320]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2211.934509][ T5320]  bcsp_close+0x127/0x1e0
[ 2211.934528][ T5320]  ? bcsp_open+0x5d0/0x5d0
[ 2211.942703][ T5320]  hci_uart_tty_close+0x385/0x410
[ 2211.942703][ T5320]  ? hci_uart_tty_open+0x5a0/0x5a0
[ 2211.952773][ T5320]  tty_ldisc_release+0x5dd/0xd50
[ 2211.954535][ T5320]  tty_release_struct+0x4f/0x1d0
[ 2211.962757][ T5320]  ? tty_unlock+0x82/0x100
[ 2211.962757][ T5320]  tty_release+0x1be2/0x1e80
[ 2211.962757][ T5320]  ? tty_release_struct+0x1d0/0x1d0
[ 2211.974565][ T5320]  __fput+0x4c9/0xba0
[ 2211.974565][ T5320]  ____fput+0x37/0x40
[ 2211.982946][ T5320]  ? fput_many+0x2a0/0x2a0
[ 2211.982946][ T5320]  task_work_run+0x22e/0x2a0
[ 2211.992828][ T5320]  prepare_exit_to_usermode+0x39d/0x4d0
[ 2211.994678][ T5320]  syscall_return_slowpath+0x90/0x610
[ 2212.003020][ T5320]  do_syscall_64+0xdc/0x160
[ 2212.003020][ T5320]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 2212.014580][ T5320] RIP: 0033:0x413a91
[ 2212.014580][ T5320] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2212.034626][ T5320] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 2212.042698][ T5320] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413a91
[ 2212.054553][ T5320] RDX: 0000001b2f720000 RSI: 00000000ffffffff RDI: 0000000000000003
[ 2212.062701][ T5320] RBP: 0000000000000001 R08: 0000000081840bf1 R09: ffffffffffffffff
[ 2212.062701][ T5320] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0
[ 2212.074553][ T5320] R13: 000000000075c9a0 R14: 0000000000760410 R15: 000000000075bfd4
[ 2212.083291][ T5320] Kernel Offset: disabled
[ 2212.083291][ T5320] Rebooting in 86400 seconds..