0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x30, 0x0, &(0x7f0000000b00))

[  826.340756][   T27] audit: type=1800 audit(1593034456.469:25): pid=5088 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15685 res=0
21:34:16 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x20000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r1, 0x0)
clone(0x14124902, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
socket$inet6(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000000314000428bd7000fcdbdf250900020073797a3000000000080041807369770014003300000000000000000000000000000000000900020073797a310000000008004100736d770014003300636169663000000000000000000000000900020073797a3200000000080000000000000000000000090002797a3200000000080041007278650014003300626f6e645f736c6176655f30000000000900020096a1155c664790a708004100727865001400330064556d6d7930000000000000000000007de93a4322dfe17f7624e9cd3ca9b1fd5c855a79c346395dac430f3c6e22eae7062448e3bade514967d60000"], 0xd8}}, 0x8000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

21:34:16 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f0000000b00))

21:34:16 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x2}}]}, &(0x7f0000000180)=0xc)

21:34:16 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:16 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000b00))

21:34:16 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:17 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x4}}]}, &(0x7f0000000180)=0xc)

21:34:17 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000000b00))

21:34:17 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x1, 0x0, 0x4})
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f00000002c0))
clone(0xe1004d7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50)
process_vm_writev(r3, &(0x7f0000002480)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000003500)=[{&(0x7f0000002500)=""/4096, 0x1000}], 0x1, 0x0)
kcmp(r3, 0x0, 0x0, r1, r0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000000)=0x20000011)
syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00')

21:34:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:17 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x6}}]}, &(0x7f0000000180)=0xc)

21:34:17 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x39, 0x0, &(0x7f0000000b00))

21:34:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:17 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x8}}]}, &(0x7f0000000180)=0xc)

21:34:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:17 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000b00))

[  827.249032][ T5123] IPVS: ftp: loaded support on port[0] = 21
21:34:17 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0xa}}]}, &(0x7f0000000180)=0xc)

21:34:17 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x3c, 0x0, &(0x7f0000000b00))

21:34:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:17 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0xc}}]}, &(0x7f0000000180)=0xc)

[  828.030787][ T5176] IPVS: ftp: loaded support on port[0] = 21
21:34:18 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000200000000007e00000000315256b6d104640aa19014a594aae928cbeb3962f5ee63c82400"/49], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)

21:34:18 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000b00))

21:34:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:18 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0xe}}]}, &(0x7f0000000180)=0xc)

21:34:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000002e2c739b9ac3fb259703e5df1494cc85d9310e6eb5415bfe63ec4b5ca7745e7f6d9cf5aa88aa6fd28cad21bf597831374e385606fc67bf35d18fc0bb9b8ccb264cc7d0f41f2c9313740c9ae5f3736e1be7d59a5763aee50300a8c726b961f9358e7f674bd4552cd0387859e15ecff8dc66712d84d3441d63a8836b0dc08e120ac243717bca06c71546ea2397f17c5a7f031e60cc5d47d05f1cf2d4728f79f4c242941d8a3b63b400000000a48ff80fdfb55f142ece394985afadbc5a6022d497de4aa5e9c427325771f455e0eeb7b07dc84da0b6", @ANYRES16, @ANYBLOB="020026bd08006b000008000022cb04dc0d533ab75b2c8d6a087f2b6d77784924f63ab7ef90f919278bb545032800000400cc00"], 0x44}, 0x1, 0x0, 0x0, 0x2400c090}, 0x4044805)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7, 0xffffffff, 0x6, 0x2})
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280))
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959af48ba8a8d24a25bf5f947d295fb747f57b749d9a5ff3ada239f3b62d2e25f348b72fc8bdd0190bdc3259c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b000000", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdf250200000c080002"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x9)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="030628bd7000fbdbdf25040000000800010002000000080001000100000008000200000000002c00048005000300050000000500030002000000050003000500000005000300050000000500030006000000b8000c800c000b8008000a00ff03000014000b8008000a006f08000008000900bf93f90a44000b8008000a0048840000080009006eba8156080009007c17f01608000a000ab20000080009009daa0a440800090049a3d92f08000a00d481000008000a00020000002c000b80080009002098336408000a003d4c000008000900a4f64a4708000a00bce3000008000a00a2ba000024000b8008000a0015cf000008000a00afb0000008000900a19a411208000a005d04000068000c800c000b800800090065efe80b24000b8008000900f1b598280800090079e5b22c08000900130f685508000900e63f954c34000b8008000900bf861d6d08000a000300000008000a00308e000008000900a490b47108000a00aa71000008000a00fec60000080002000200000056a0dbad8e539fa34767e877763eee11e9fc930c09064c7ce8f2ff1a4a1975ecb00940cac2ccd14a209a28eb6e83f0ed1d1974d1648a67af62942b00c569ee986abbe0a11654c6109eeeb657d9e5a25ebac3118dd84cd2a19398ac7d0d97f50b3a532ad539392c44e274ca21d284782442307849c34fce0852ccfb5f962f91da2761a9ad3d83729101aa8d46757629f5149aae27600ce97a135e11a20e538854bb8c10406e46213c549fe309f7989e51a684345867ef9b1ec38c743f7966e82f6c9ea26b4186b29b3fe7fc44eab7f782dd16f91a295ed25a13451427cbe581a0d4a8d51fbf56c5dcb97b6e69f35e5496242ba56ed36142a2bcab7cd36edd9af9f43e"], 0x180}}, 0x1)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1f8, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2a3bda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2522bd0e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f1ab5aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11e132a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68f29a9a}]}, {0x4}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284728c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x766d1dcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a14a0ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e8f83c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7831ea86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e55bc9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45be7fdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d5874eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c17add2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1564ad60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd56286}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb87fbda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1131a51}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47848a57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eef3969}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bfd1f16}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x778344d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x424257c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75015b03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9f0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c39406c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fff1a6d}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19a8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bf86e09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1aa6e1f8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67e109e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8eaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x421ad062}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
r6 = socket(0x3, 0x1, 0x5)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000003080101000000000000000001000009340004800800074000000081080005400000002008000140000000020800034097750008080007400000ffff0800044000008001"], 0x48}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

21:34:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7, 0xffffffff, 0x6, 0x2})
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280))
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959af48ba8a8d24a25bf5f947d295fb747f57b749d9a5ff3ada239f3b62d2e25f348b72fc8bdd0190bdc3259c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b000000", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdf250200000c080002"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002abd7000fbdbdf25020000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x9)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="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"], 0x180}}, 0x1)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1f8, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x14c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e2a3bda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2522bd0e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f1ab5aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11e132a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68f29a9a}]}, {0x4}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284728c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x766d1dcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a14a0ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e8f83c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7831ea86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e55bc9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45be7fdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d5874eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c17add2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1564ad60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd56286}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb87fbda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1131a51}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47848a57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eef3969}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bfd1f16}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x778344d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x424257c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75015b03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9f0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c39406c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fff1a6d}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19a8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x420, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1e8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34e95e90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf685f35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a508e9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ebe425e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38681821}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5af5b48b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5853a26d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15afb731}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5610a387}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3edff218}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f890a02}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2091b4e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x298e817a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55cd2677}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482270aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x623007c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa6be739}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f3cbd5b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ef4cab4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c277f8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x243e0815}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x594b3d3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4671da59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1306ca71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6571018}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4466ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14561052}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7660f6f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64abee08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa580d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fdeb790}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d01d320}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4df0bc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21b01efb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47e3a023}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262651a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c975c17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd89efa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a11007b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x257b98a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cdbf041}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711b2fe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a7c86b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40c085f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a3840cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56820e2f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x549345d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e1ac6ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c92fbd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bed2bb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x119a95cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x125de89a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d0cdf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fb304c3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x173f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5259}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7217314}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3786}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf167}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42d36f0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a6f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63d89138}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11ea98de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21012385}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b712c87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b77f539}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a4cfdd5}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x420}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

21:34:18 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x3e, 0x0, &(0x7f0000000b00))

21:34:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:18 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x10}}]}, &(0x7f0000000180)=0xc)

21:34:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:18 executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c00020008002d"], 0x3c}}, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5427, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
fcntl$getown(r2, 0x9)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000040))
dup2(r3, r4)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x10)

[  828.470106][ T5200] device lo entered promiscuous mode
21:34:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:18 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x42, 0x0, &(0x7f0000000b00))

21:34:18 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote={0xac, 0x14, 0x12}}]}, &(0x7f0000000180)=0xc)

21:34:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000006ffc)=0x40000008, 0xffffffffffffffbe)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
getsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendto$inet6(r0, &(0x7f0000000300)="0503d03206a43e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

21:34:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  828.866352][ T5214] Y�4��`Ҙ: renamed from lo
21:34:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}}, 0x0)
connect$packet(r3, &(0x7f0000000080)={0x11, 0x1c, r5, 0x1, 0x4, 0x6, @local}, 0x14)
r7 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r7, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r7, 0x6})

21:34:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:19 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x43, 0x0, &(0x7f0000000b00))

21:34:19 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2)

21:34:19 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x3, &(0x7f0000000080)={@dev, @dev}, 0x8)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback, {[@rr={0x7, 0x7, 0xd1, [@dev={0xac, 0x14, 0x14, 0x3b}]}, @end]}}, "00006371ae9b1c01"}}}}}, 0x0)

21:34:19 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x6280, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f00000000c0)="47163570a47592960fa308210b57268eed43cc892b0a805bac4896996fdac967c900000fc157cd49392012bb1855e37cf916e2c156d92c7e620cd4152ce575310eec802f27400410c749bb9f1d05dd955a44861c23056025ff5ec85f7f5f4fb1d52afc28d9ce4eaaa2eca971e02f9ce37ed15de711d20592c5e924ec8f2a601869aa0a062984ee20828b8540dc082d4e97b76d8ed6dff98eeb95fed87836d21b9fdae6e381b9858118b48f5d38c392c780ed7dbf41329a89", &(0x7f0000000280)=""/208, &(0x7f0000001300)="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", &(0x7f0000001280)="b600d2af03f522ac48564ec61c38aba0fbcd", 0x7, r1, 0x4}, 0x38)
getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000000))

21:34:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:19 executing program 4:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r1 = socket(0x1000000010, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r6, 0x5427, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r5, @ANYBLOB="0000de15eac5cb377030c0920800ffffffff00ceb8950f67d8cf0e667363000000000800027b4f6fdebdc1026e11eaff1322b135f418205f6b4a6a3f61164dfca5a712861ff6bebf090133fe3c31c33782c37e897fa9f543a929c57166ac8214e34e0892e4bd4517510d75b9f198481160ace0e941b7e8f1ff783eeb4b4f342adb80ea8f20a5c7bac54a2674bea3ebcc"], 0x38}, 0x1, 0x0, 0x0, 0x4004814}, 0x4048003)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="000100"/20, @ANYRES32=r5, @ANYBLOB="00000002000008cec8a8052cf600c8cccfad"], 0x24}, 0x8}, 0x0)

21:34:19 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3)

21:34:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  829.474969][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
21:34:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0xc0902, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:19 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x4)

21:34:19 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
r3 = dup2(r0, r1)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r7)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x44)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r9}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={<r10=>r9, 0x400, 0x3, 0x9, 0x1, 0x81}, &(0x7f00000001c0)=0x14)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r10, 0x800}, 0x8)

[  829.614593][ T5292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
21:34:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:19 executing program 4:
r0 = semget$private(0x0, 0x0, 0x230)
semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/13)
ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@fixed={[], 0x12}, 0x73b9})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x4a, 0x40000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f00000000c0)={{0x1, 0x3, 0x80000001, 0x2, 'syz1\x00', 0x401}, 0x1, [0x4, 0x6, 0xba2, 0x80000001, 0x5, 0x9, 0x2, 0x1, 0x2, 0xfffffdb3, 0x1b0, 0x7f, 0x5, 0x8, 0xfff, 0x40, 0xffff, 0xfffffffe, 0x1, 0x80000001, 0x8001, 0xcc, 0xc0000000, 0xffff7fff, 0x80, 0x60d, 0x6, 0x8, 0x20, 0x883, 0x3, 0xb5d, 0x2, 0x9, 0x2, 0x8, 0xe0000, 0x7, 0x8, 0x1ff, 0x4, 0xff, 0x3, 0x1, 0x6, 0x5af5, 0x4, 0x8d13a4d4, 0xffffff7f, 0x82, 0x4b, 0x7, 0x8, 0x1, 0x4, 0x1, 0x7, 0x5, 0x6, 0xff, 0x0, 0x4, 0x9, 0x4c, 0xc13, 0x1, 0x3, 0x7f, 0x9, 0x9, 0x5, 0x44, 0x5, 0x4, 0x9, 0x7ff, 0x5, 0x8, 0x8, 0x40, 0x110, 0x80000000, 0xfffffff7, 0x8, 0x8, 0x4, 0x3, 0x1, 0x8, 0x8000, 0x9, 0x7, 0x3, 0x0, 0x1, 0x81, 0x8, 0x7fffffff, 0x8, 0x2, 0x9, 0x7fff, 0xb79, 0x4, 0x9, 0x4, 0x7, 0x401, 0x0, 0xfff, 0xb05c, 0x5, 0x8000, 0x7fffffff, 0x3, 0x3, 0x7, 0x0, 0xa792, 0xbe, 0x8, 0x401, 0x9, 0xbeb00000, 0xbc5d, 0xffffffff, 0x8, 0xfffffffa]})
accept4$packet(r2, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x6, 0x9, 0x2, 0x9, 0x28, 0xffffffffffffffff, 0xff, [], r3, r2, 0x2, 0x1}, 0x40)
r4 = openat$full(0xffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x800, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000004c0)={<r5=>0x0, 0xe7ee, 0x30, 0x9, 0xffffffffba99cae6}, &(0x7f0000000500)=0x18)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000540)={r5, 0x8}, 0x8)
dup(r1)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000580)=0x8e6)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000005c0)={r5, 0x9, "edb123adf0a8cceb70"}, &(0x7f0000000600)=0x11)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000800)=<r6=>0x0)
r7 = gettid()
r8 = openat$dlm_plock(0xffffff9c, &(0x7f0000000880)='/dev/dlm_plock\x00', 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x160100, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x3d}, &(0x7f0000000700)=""/189, 0xbd, &(0x7f00000007c0)=""/58, &(0x7f0000000840)=[r6, r7], 0x2, {r8}}, 0x58)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000980)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r9, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x40}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c094}, 0x880)

21:34:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x1000, 0x0, 0x1, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r7 = dup2(r5, r6)
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r8, r9)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, 0xffffffffffffffff)
r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x218000, 0x20)
pidfd_getfd(r3, r10, 0x0)

21:34:19 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x5)

21:34:19 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockopt$inet6_tcp_int(r2, 0x6, 0x32, &(0x7f0000000000), &(0x7f0000000040)=0x4)

21:34:20 executing program 4:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x5)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc04c565d, &(0x7f0000000000)={0x8, 0x6, 0x4, 0x100000, 0x10000, {0x0, 0xea60}, {0x0, 0x0, 0x2, 0x4, 0x9, 0x81, "eeeb8deb"}, 0x2, 0x3, @userptr=0x9, 0xed5})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
r9 = accept4$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, [], [{0xfffffffe, 0x9, 0x6, 0xfffffffffffffffa, 0x27, 0xfffffffffffffffa}, {0x6, 0x1000, 0x5, 0x2, 0x8, 0x4}], [[], [], [], []]})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x24e15, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010000104000000000000000000000900", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800200000040000"], 0x50}}, 0x0)

21:34:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:20 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x6)

21:34:20 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x174, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xb7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}]}}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x2000c800}, 0x400)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:20 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0xa})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3, 0x6})

21:34:20 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000b00)=0x75a1ab029267aae5)

21:34:20 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x7)

21:34:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:20 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040))

21:34:20 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x8)

21:34:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x10802, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0xfff, 0x6, 0x2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:21 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

21:34:21 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:21 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x9)

21:34:21 executing program 5:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5427, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$fuse(0xffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
r3 = gettid()
r4 = gettid()
tkill(r4, 0x1004000000016)
r5 = gettid()
tkill(r5, 0x1004000000016)
tkill(r5, 0x1a)
process_vm_readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/50, 0x32}], 0x4, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, &(0x7f0000001340)={{0x0, 0x7}, 0x3a}, 0x10)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r9)
write$P9_RFLUSH(r9, &(0x7f0000000140)={0x7, 0x6d, 0x1}, 0x7)

21:34:21 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:21 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xa)

21:34:21 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0xa, 0x80000000, 0x2, 0x1, 0x0, 0x7fff, 0x1}, {0x2, 0x99, 0x0, 0x7, 0x7e29, 0x8, 0x7}, {0x40000000, 0x80000001, 0x5, 0xec41, 0x2, 0x4, 0x7}]})

21:34:21 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xb)

21:34:21 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:21 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:21 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xd)

21:34:22 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

21:34:22 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:22 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xe)

21:34:22 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})

21:34:24 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xf)

21:34:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:24 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

21:34:24 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x402, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
dup2(r5, 0xffffffffffffffff)
r6 = openat$vsock(0xffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x200040, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000340)={'vlan1\x00', {0x2, 0x4e23, @multicast2}})
dup2(r1, r2)
write$P9_RREAD(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="9300000075010088000000f748d8ad7023dd0905b7b2565829d35c04d05a98404b12712c70070686f407b1390b2e64b84edbaceb3db5138400d55782c76516092a0cbf8b805bd46ae3ef6f011234592162ec18443c33348db90c3b718a526ad4ed058ee7355a161a2d44b131160918f885ee7ffccfa37066075d2e6f9fbed17fce5d4626cbb6855e19d25bfb4cfd6208aaf8f4"], 0x93)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)

21:34:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)="e2274466c411f251534ad3b83ae9ae4747d66dc933b0a20f6df0e0e2b5f38177d4bb81b2be6eaabbd2fbbc343066662bf8ec7358c776b2d7eae704b20e2532542c9ddeb37bf14a421dd7ff58bca04df73e56c11d2287991a88b3219ecd672424efe00ad80cd01c54178193778a05dd62b26d9e7b854df6f51c52ea01d18484c21991b8237885e174894a4db3f037a276f5485da64b63d8d96c29bded1ac5ffe28f58b7b060149d2abe03d0167835130b83ad7c240346fa2edf61b3181838a0220d77ec4257ef83273c441dee3e1e51a2dc6f9dfa2d3f534eb7f5fe4a035dd493f477d4b1ba2e1cb7debc352f1e698e1a2ab41d5d201205374a152e44baea2dcb3f740a07fbcd589ee04a581fda61684df0bcc797c6d9b9c8ac976915fb0e240a9badce6f4f383711c61545f665a12be4", 0x130, 0x2})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={r2, 0x10, "d018df6e815560498a2ebced78d11f7b"}, &(0x7f0000000540)=0x18)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = gettid()
tkill(r6, 0x1004000000016)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f00000003c0)={{0x0, 0x2, 0x1, 0xed8e3000, 'syz0\x00', 0x8}, 0x5, 0x3, 0x5, r6, 0x3, 0x3, 'syz0\x00', &(0x7f0000000240)=['-]\x00', '\x00', '/dev/kvm\x00'], 0xd, [], [0x2, 0x0, 0xdedb, 0x9fbc]})
r7 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10501, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f00000001c0)={0x3f, <r8=>0x0, 0x10002, 0xc7})
ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0106434, &(0x7f0000000200)={0x0, r8, 0x10001, 0x1})
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x32a00})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

21:34:24 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10)

21:34:24 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000200)=0x1)
getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)=""/166, &(0x7f00000001c0)=0xa6)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/177, 0x80000000})

21:34:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x3f7)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x3, 0x4, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:24 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})

21:34:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:24 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x11)

21:34:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:25 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x12)

21:34:25 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

21:34:25 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2040, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={<r5=>r4, 0x401, 0x5, [0x1, 0x0, 0x2, 0x101, 0x3]}, &(0x7f0000000140)=0x12)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r5, 0xff, 0x5, [0x8, 0x81, 0x16a1, 0x400, 0x3]}, 0x12)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r7)
ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000200)={0x5, 0x1})
r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0xd3b4a38ddf74f74a, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000001c0)=':\x00', &(0x7f0000000b40)="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", 0x1000)
ioctl$TIOCSLCKTRMIOS(r8, 0x5427, 0x0)
r9 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x40000, 0x0)
dup2(r8, r9)
ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x7, 0xffffffff, 0x5, 0x4}})

[  837.066355][    T0] NOHZ: local_softirq_pending 08
21:34:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x7, 0x80000001, 0x1, 0x1, 0x7fffffff, 0x71a, 0x7ff, 0x1, 0xffff, 0x101, 0x7, 0x7, 0x1, 0x0, 0x17, 0x1, {0x2}, 0x7c, 0xd4}})
r3 = eventfd(0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1000, 0x0, 0x4, r5})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3, 0x6})

21:34:27 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x13)

21:34:27 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x200000, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
dup2(r0, r2)
getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, &(0x7f0000000040))

21:34:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000ac0)=r4, 0x4)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r5 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)
shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r6 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000a80)={0x168, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/133, 0x85, 0x0, 0x6}, @fda={0x66646185, 0x6, 0x0, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/19, 0x13, 0x0, 0x16}}, &(0x7f0000000200)={0x0, 0x28, 0x44}}, 0x1000}, @request_death, @acquire_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/181, 0xb5, 0x0, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/117, 0x75, 0x0, 0x2a}, @fda={0x66646185, 0x6, 0x1, 0x2a}}, &(0x7f0000000580)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/249, 0xf9, 0x2, 0x26}, @fda={0x66646185, 0x5, 0x2, 0x23}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000740)={0x0, 0x28, 0x44}}, 0x1000}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/66, 0x42, 0x0, 0x11}, @fda={0x66646185, 0x5, 0x0, 0x15}}, &(0x7f0000000880)={0x0, 0x18, 0x40}}}, @register_looper, @increfs_done, @exit_looper], 0x2a, 0x0, &(0x7f0000000a40)="957bed107a0a1e0b4d131e761cfd7a4a16294e9db25f9eaddb470582fd70abd465d69c90d32f3b9df3e6"})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

21:34:27 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:34:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:27 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:27 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x14)

21:34:27 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:34:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x100, 0x0)
ioctl$VIDIOC_S_FBUF(r1, 0x402c560b, &(0x7f0000000140)={0x40, 0x8, &(0x7f00000000c0)="454c0f66d6e9c19cdb9a0f7da06fa47297e8ff2b51977126662e958a5dfd3434ce4c461cfbccaefae88cfd8c530c4a82210164b8117eb0e003afa58b2b53362d5e042a88aa70c8683697574abbc2cac609aca1dafeff8730c795af96d215b7a910b832cf79f12424321005b3a7f2", {0x9, 0x1, 0x32344d59, 0x7, 0x6, 0x7, 0x5, 0x6}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0xa})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3, 0x6})

21:34:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:28 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x2)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x6, 0x202000)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd11b4a6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}}, 0x40040)
openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x8200, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

21:34:28 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x15)

21:34:28 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00)=0xffffffffffffff21)

21:34:28 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)=""/176)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:34:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe4)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}, 0x14)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1)
io_setup(0x6, &(0x7f0000000000)=<r5=>0x0)
io_pgetevents(r5, 0x3, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
io_destroy(r5)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r7)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1405, 0x10, 0x70bd2d, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000005}, 0x800)

21:34:28 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x78, r5, 0x121, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @loopback}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000155}, 0x4004841)

21:34:28 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = syz_open_dev$audion(0xfffffffffffffffe, 0x80, 0x2000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000080)={0x68, r4, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r5)
ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000000))

21:34:28 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x16)

21:34:28 executing program 5:
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000b00))
r1 = openat$vimc2(0xffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x10000, 0x36314d59, 0x1, 0x10000, 0x1, @discrete={0x72, 0x5}})

21:34:28 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x17)

21:34:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
pipe2(&(0x7f0000001540)={<r2=>0xffffffffffffffff}, 0x4000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x40)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
io_setup(0x6, &(0x7f0000000000)=<r4=>0x0)
io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
io_pgetevents(r4, 0x949, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000001c0)={0x0, 0x989680}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

21:34:28 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x18)

21:34:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x283, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:28 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3c8, 0x1, 0x3, 0x3f278cb329ec466, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_PAYLOAD={0xf0, 0xa, "827de78fdcdc081926fdfcbd57f0fd0c9afaecb95ee44880610208ad4ea6ce671a3e70b9bf4534d918492737a5dc8d7fd0d095818fad0798b5f7b98a4d8c04a06970ab72515d4a82a3c3392ab46f75153a5a9a6573f683324821dc1203eeffa520c2d02f8effda88c22ef52f9e2e3e5a85e71a40e52a7ae9b6fc1cfd14c0018114cd4855968b2087905ba81a77e80a432a8055159253ff223c0e675a2896f12af4a3cd453adfd533706cf08910180f8d9973cb6cfeb1533e5fbc1b2bd51bacb82677489952508c61dc8c5f82c27bf9a47061a383f6fc4254f627850192c038362cc7b3627c71651a875f6196"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xd55e16238536ff24, 0x8}}, @NFQA_CT={0xc4, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={[], [], @empty}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CT={0x118, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x300000}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x3e}}]}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x28798dfa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xba}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2f37}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff8001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x144f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xb9aa}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7f}, @CTA_MARK_MASK={0x8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_EXP={0xcc, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x31}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x880}, 0x10)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, r5, 0x90d, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100029bd7000fedbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000050083000100000034a1d2d0645f45b85d25b5091b4625f0c0c2ebd1e50b2dfcd66095f946150afd848f88459ea8955edfe1a0263c11e7b8d90fe357f7304627941cabc90e0c3a993ffe"], 0x48}, 0x1, 0x0, 0x0, 0x4001080}, 0x1)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000000075e61a08, 0xc09, 0x0, 0x4, 0x1e, 0x0, "391edef8a54d989223491d074be9126491addc9f87226adbdf601f461c0cd8ea7c27fac4e60fba7c65fdc74e7efb123c8144a5617f7568167cca8d01831200", "ff34ba3f5861e472e27a172e58428483c960f24027f7a0c48e5b10e4373abfbe004fbfcc91000ad71fdee21965bf90faf8f0f87dc8691d153560a741bf9621f0", "e025f149a6be45eb619d95eca3bbe0553df226546bc06425936f2d81061135f7", [0xfffffffffffffffa, 0xedf5]})

21:34:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8008550e, &(0x7f0000000340)={0x6, &(0x7f00000001c0)="2b76f18e57632e0e25d74a01d189e155000617dcc691c881fda3f354d63da836789878a3afcda938758c74fc0661ab2574cc19ca243a6f9f4fcc5bbaf422b2a3598b6e658663b942f1380ead03bc512d0c4d37"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x6, 0x800000000000004, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40)
dup2(r5, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x101, 0x0, 0x1, 'queue1\x00', 0x3})

21:34:28 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:28 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x19)

21:34:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0xfffffff9, 0x6e})
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:29 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x1a)

21:34:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:29 executing program 5:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/1170], 0x490)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000b00))

21:34:29 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x200620, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xd000, 0x0, 0x0, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xd000, 0x0, 0x0, r2, 0x6})
connect$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, @any, 0x80}, 0xa)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000200))
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
write$char_usb(r6, &(0x7f00000000c0)="e37fc6336c99d8018b9d40847da13721ac6e570700112af9ed73cbba0592d5ef08f1dd18", 0x24)

21:34:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:29 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x1b)

21:34:29 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000b00))

21:34:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:29 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:29 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = socket$inet(0x2, 0x80001, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e20, 0xffff, @loopback, 0x6}}, 0x9, 0x5, 0x6, 0x1, 0xf7}, &(0x7f0000000180)=0x98)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000000)={0x4, 0x0, 'client1\x00', 0x6, "a7fdfaa7b03452b0", "6c61116283a8b445c19381b5c4290d4f02c2907d42559f431d893efbf3939f8f", 0x81, 0x7})

21:34:29 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:29 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x1c)

21:34:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:29 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x1d)

21:34:29 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40044146, &(0x7f0000000000)=0xffff)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r6, 0xab9535e9a6578fc1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x6, 0xf971, 0x6, 0x3, 0x1, 0x1]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "5d2a66396baf17ee33fc7f5b3e264ca043e168e5ea817ccb2c49e1fdffeaa338f1d518a49b8c4456613f134cdf2669c26dbee6a5c0541a890931d914b3d1acb6855a3554cb10f0c0f21d13dd565648199532e9ec546a0102fbf12e40b68add16c04c9db541efd40e81865f6067586edf95d339692ca8aa3b0c23cbfa759146f7211b6d2d736b0a5b4bd1e5c8"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000811}, 0x802)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:29 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5427, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
dup2(r0, r1)
openat$null(0xffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd(0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="34189f0000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff0000000008000100647272000600050006000000"], 0x34}}, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@mcast1, @remote, @rand_addr=' \x01\x00', 0x80000001, 0x4, 0xff, 0x900, 0x1, 0x100})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r7, 0xe})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r7, 0x6})

21:34:29 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400400, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)

21:34:29 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x1e)

21:34:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:30 executing program 3:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$vcsu(0xffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0)
r2 = eventfd(0x0)
r3 = gettid()
tkill(r3, 0x1004000000016)
capset(&(0x7f00000000c0)={0x19980330, r3}, &(0x7f0000000100)={0x8, 0x2, 0x80, 0xee, 0x6, 0x3})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:30 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:30 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4a, 0x100)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000001080)={0x40, 0xf49, 0x0, 0x54, 0x20})
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000140)=0x1)
dup2(r2, r3)
write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x86bc)

21:34:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:30 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x21)

21:34:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:30 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
accept4$unix(r2, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0)

21:34:30 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x22)

21:34:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:30 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x9ad, @local, 0x1000}, @in6={0xa, 0x4e20, 0x2, @empty, 0x7f}], 0x38)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:30 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x23)

21:34:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000080)={0x0, 0x1, 0x17, "21a3aacf424709c609699ff12f211b8ecd189ce39035a46806aa1419da6f37fc4daedb5d1b363caaee63535be67d34f7b951b5536348a1bfabad98dc", 0x9, "1a641a9e0f09e40b86c01e3e3e4e5a854e003356292565723fddefae5faf5e731bc327b571e6c69425161ae0e43ddde03f75e7de5314682780583e18"})

21:34:33 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc01c64b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x4, 0x81, 0x7], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0xac, 0x176767677})

21:34:33 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x24)

21:34:33 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="c33a926c23439cd9490f388a0d799886be238ff29b8ed71f69c05b983a50eb1614c0262457bc267df91d69037d72c103f16eb2d2a02252d7127b9c9b599423f7d1f0e285c175b43414739c51c1bf728f8c692c54a48b", 0x56, <r4=>0x2})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='B', 0x1, r4})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

21:34:33 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x25)

21:34:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:33 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000400))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40246608, &(0x7f0000000080)={0x1, 0x2, 0x2, 0x0, 0x7, 0xa5ff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/kvm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x1)
openat$vsock(0xffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x1, 0x0)
openat$ocfs2_control(0xffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x42040, 0x0)
r7 = openat$nvram(0xffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0xc002, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000380))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x32a00})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

21:34:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:33 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:33 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x26)

21:34:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x3f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:33 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28)

21:34:33 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="53a8924bebff67d84b9e4727a05c8a33e372740f444ea6e74390e02f94d50745587e2a0a2d176b35a802307ff3125d7b09fadfd7051351de79f22997add0b1edb41e3d4b1034a3f6478fc02ccc4aa9f7747e85ae9734edd24f9e066e5f7944c0", 0x60}, {&(0x7f0000000200)="4321c29460a20761d01c7e7f02ff3e88ef5d11e12d931aab54c17cf9387d637f2929b0730f114e2f7584f200975a86c471cb589d02561d75163595f7e8a8ee9a509ab8fd514fc0e44a73c9a33f4e5c54b5f7efc9266e5daef992629fe49c27ea6a757ff84df747c4506b53e44163204a56669da297fec2264c073cbeffa08b0c89ee8c3471db2b8a48aee77a2663444ac4b88be2e218e7c9ae7f50b20d3cef6d6284291b5ed5b0d43aaac1cdab7e92554796eae7ae6481643b5dd7649df6297992c0b981b63b57f70f966ffbae975f5dc503fb4f70700dd712b5eace4a3ebb12aef511ae70652f4c06b906034bdf52cba314d999", 0xf4}, {&(0x7f0000000300)="8a711d43400fd6355e571ebdbb774ef20698a4ce829fe51b3114e8eb5c3912cb23781ecef1caebfe71dac612de01fc66108db1ac8884b7bab6076f5641b3d4042dd93074ed308f83a58545532ccb4ed47136c017bcd75dedebfc5dbefb65f5556a", 0x61}, {&(0x7f0000000380)="89327235ad560f81c573a4b8cb7528b55b9d8ae2f2c4674d880089f1fd4632a8bea5be73d46bf9184bbd98ee80a152f55f396a0e6c7fff4ff3d708425cb7261283e95935578a4e7e7371cf8c", 0x4c}, {&(0x7f0000000400)="b8f7740fb0c69fb8333d8fd20ae4e2e49dd8556103c7afda23382049102ff6b35c2860d27673ec412dcdf00b68125e86e07d07e01d2f1a7dc6153bcb50041a5fd7bbe84fd9e2b258bc71ef96ced186fe9c6657f3719eb7a27cb1e458d4882acda87724824a44a2a5c5a4fe082e229b6dac13da1d0f255e2b5320053b424a168a7c49fbc4cbd676ed17f158f325febe5e62993da3f405c73c134c89429530f923d96c61af14323cba33257c6a5543d0b004d7cb7551300cbff21f9e6d5725865da04e8871fa250a68f0ae598d500c8cf222edd901090c1c74da5c9a4fb8678139333f192b83e49fc3961aa2db0d04b637", 0xf0}], 0x5, 0x2)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:33 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x27)

21:34:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:33 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r3, &(0x7f0000000040)=0x4)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:33 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x90, 0xff, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x3eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x40, 0x3f, 0x80, 0x18, 0x4}, 0x1f, &(0x7f0000000980)={0x5, 0xf, 0x2d, 0x3}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x44, &(0x7f0000000300)=@string={0x44, 0x3, "c0d420e402271398b78c0efbcb2b87082974d997072204b7f8ea94c0561db159878288b37d11baaa03ee5d6b5ffe483f297e82752bb47d13b7760cf7f5bfeaf50518"}}, {0x1c, &(0x7f0000000380)=@string={0x1c, 0x3, "c2bf596c5e65d12ef83a12349730235600d69340025ec960fc2f"}}, {0xb2, &(0x7f00000003c0)=@string={0xb2, 0x3, "2658245faff87860f345fc3e1b0a7056db636341c271192b89bee1f72b9cfe7e8c8d12d7842050edf071fba36101be188f2d9f9631e7671b1a40c363b36f0d07dc65b4411c6973a9ecbf7ea84fed606727b0cdceeb31188b74d7adaa86d7d50bb9c78917717ad8d3a37ac62c402b9d9746f680c1ba455c25ac117800df30b853d116937608fc8317a89c822eac1bf72959d68c3d0ed09799e7b91dd5a44a6565cd5f3bcae41c19026764e5041c142977"}}]})
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x14, &(0x7f00000004c0)={0x0, 0x21, 0xce, {0xce, 0xc, "64f61773801d7034a586e265a9b98ec104d4d60bf4ad7cdee7960e3806da1326dd34e12563d2a6c80cec3c5977d581905b47c55517aed7903df3396f333d2733872f8b1e5ed1588ef2f59bc0e6f06ce412b01ba185dfd91723059bf149b027836a466338c0c4739c9e7f12ec4f374ff8561c40df246eb2aac5d6227e5596073fdaa0e8b9e0aed026665efd070c5b6cbcfa274c89f60b834cc5eeb8771781a3bc6cc7d3a6a4f7c0a0c2c1721882e1507e9ac675479331fd43f54d8f2dfc1e7aa315e65dd3dd8b3cad44aa1e44"}}, &(0x7f00000005c0)={0x0, 0x3, 0x53, @string={0x53, 0x3, "8fc36f63ad30f28ff881b627772b28e96aed2363396b43e12fd913c02ea0e72aa796b6f900e528af91fde2e9745151c5aa40a0df2c1bb8b9942dddc63752cace0b4aa4ea55c27600572021df9752cd9b98"}}, &(0x7f0000000640)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, "a3"}, @local=@item_4={0x3, 0x2, 0x4, "33d607b7"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6b, 0x81, 0x1, {0x22, 0x431}}}}, &(0x7f0000000940)={0x18, &(0x7f0000000700)={0x40, 0x0, 0x48, "251aeb6687dccf1f989750231bfb5adc3eb63f74bb6baa9c8383cc09fce5e31b4872612ded4d6336254445ebc734ecdf51c61e6585139ddf39d32fd55fd65efa5157aad80497a264"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000800)={0x20, 0x1, 0xc9, "31099724e2115f09f4dcf3df9c858ed7c1d09375dcb5ab483ce1de5685f465af423f7ec9ad1dc831d70c1f202af02a96147bffdec0110d2bfe24d6aec140f9dc2ac383b55c07adb63af5cc2856442dfdf080a6e3f5ed228efbec5131f6639372f6bf92c1b618458663b98076ea0274fdc0e10085d1eeba0999b52771e5fded0f6e4d78084aac144426899f045bebaf36b5b6b5e25802034d33bcf58aa39c26a4ee3585b80362e3b55cf329a0d2ae2cb94a3d7bcdcfc2fe5297e61ebf3d93d17c9b767ee632530135ef"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x80}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x10001, 0x9a000)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

21:34:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x28)

21:34:34 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
listen(r0, 0xfffffc01)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x20000, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x4d9, 0x7})

21:34:34 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r3)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="24120b0004080100f500002100"/33], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4801)
r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000180)=0x8f)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$snapshot(0xffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x208000, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xb8840, 0x0)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r6, 0x5427, 0x0)
dup2(r6, r5)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000080)={r8, 0x401})

21:34:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x29)

21:34:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:34 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  844.326692][ T6959] kvm: vcpu 256: requested lapic timer restore with starting count register 0x390=3590346275 (459564323200 ns) > initial count (411796868608 ns). Using initial count to start timer.
21:34:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2a)

21:34:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = openat$vcsu(0xffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x0, 0x0)
ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000180))
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x8042, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x8000, 0xd6, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2, 0x8, 0x3, 0x0, 0x1], 0x3000, 0x80})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000002c0)=0x6)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
pipe2(&(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0xc4800)
getpeername$qrtr(r7, &(0x7f00000001c0), &(0x7f0000000200)=0xc)

21:34:35 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:35 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2b)

21:34:35 executing program 3:
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x78db0eb3, 0x8}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x28, &(0x7f0000000240)}, 0x10)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x280800, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
ioctl$TCFLSH(r2, 0x540b, 0x2)
sync_file_range(r1, 0x1ff, 0xe5b, 0x5)
pipe2$9p(&(0x7f0000000080), 0xc0000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000100)=""/189)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x1000, 0x0, 0x1, r6, 0xb})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r6, 0x6})

21:34:35 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:35 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2c)

21:34:35 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x81, 0x3, 0x73, 0xedd}, {0x5, 0x9, 0x2}, {0x8, 0x4, 0x8, 0xffff}, {0x2, 0x0, 0x6, 0x3f}]})

21:34:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:35 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:35 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2d)

21:34:36 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x0, "c78ea2255ebb86ac503b30ab5c665ea68547fddd0b126b95eb01c0510fbf567403bda5ffee74e5749f990bfc79e5b3df4d28b5c535b9a56353966a760afd8691", {0xf857, 0x8}})

21:34:36 executing program 3:
fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:36 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:36 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2e)

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:36 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x2f)

21:34:36 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, r2, 0x6})

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x6, 0x3, 0x2, 0x8, 0x6})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:36 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:36 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x30)

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:36 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:36 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x31)

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:36 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e23, @local}, 0xa, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)='ipvlan0\x00', 0x0, 0xffe, 0x3})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r2 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, <r6=>r5})
dup2(r6, r2)
write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x0, 0x2, 0x4}}, 0x14)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
getsockopt$sock_buf(r8, 0x1, 0x37, 0x0, &(0x7f0000000b00))

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:36 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x32)

21:34:36 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:37 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:37 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x8})
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:37 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x33)

21:34:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000001c0)={[{0x9, 0x9, 0xf9, 0x5, 0x0, 0x7, 0x7, 0xae, 0x3, 0x9, 0x11, 0x7, 0x4}, {0x3f, 0x9, 0x6, 0xff, 0xd1, 0x1f, 0xf9, 0x1, 0x5, 0x20, 0x7, 0x6, 0x1}, {0x7, 0x101, 0x40, 0xf8, 0x80, 0x3, 0x6, 0x5, 0x13, 0x40, 0xff, 0x9, 0x100000001}], 0x6})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:37 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:37 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x34)

21:34:37 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:37 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x35)

21:34:37 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="440f20c03502000000440f22c0c401fe5bc26666420f380073b866baf80cb86fea628def66bafc0cec363e0fae761c400f01b903000000b97e0b0000b800600000ba000000000f3042f436400f050f01c5", 0x51}], 0x1, 0x40, &(0x7f0000000280)=[@efer={0x2, 0xc00}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:37 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:37 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x36)

21:34:37 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:37 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
fcntl$setflags(r1, 0x2, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x37)

21:34:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x38)

21:34:38 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xf, 0x7}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}}, 0x0)
r7 = geteuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r7, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="100002000000000820"], 0x3c, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1990, 0x8, 0x8, 0x201, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@nested={0x465, 0x6, 0x0, 0x1, [@generic="1544d0aafca4f7257d935cf65668e1377e6eb167d944ec4c60fc19dbef5795f02ab4ef8351b41bd4786b6c579a9d34a27d5bbb95cef3d6b7f390e65798ab0d629310eae45b1b280cf3c767b3e28aa9c023e348ceb06af74db69495548f32e709b97704e6f6d546b76e197e18ffd211d7b74c34966e4bd571fe1405ffc0a256d0c3dd21a654864b438aca74103b2ae81acf4daca294ce682a833e9b6662fff9e54bae05cd9a19e21ef02edf7c43e1cc", @generic="48c051895fdc989ac8805b81e16a8c74cb89830e3b122fd7b2cc274fc8943d2b9e59f9921801d05e74fe0c5d2d9cd0ef1a3222a5fc618ee04fcda395a57f31bc3fd005be284cb3af1b1cac304e4ff0507078415167c0ba22cf8e4e5b3beb1847c21ecd8b5305430d81022a41047e3d47de77413da1aa9ab28b0ce6651a549508a56a31f7a25b4f8dab8acf3d9c39ffa30eb065c300ffd4265f0b48a69f5b1da5", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}, @typed={0xf6, 0x26, 0x0, 0x0, @binary="5e8cf6f23816abc5677075f1a8f4850c75d056262f65393ae4c8877bbab93af17167ec9b07eacd4a5dfad16354a3bcd7b451729490995a092a762ec10081b13cdd3f7d1d0359ca8cf28af1ec00ba077ee32ccf9dafe94dbc1c1a5df30d0e050f41adbbf00e94137292f149505a4782d99f76141a3a8b267214533e148d462d2666efd38941a9c6d9928347db9e5ba9a03f7f0ea1579fbfb59c1ba0c335ae4572de3334be0ef86f982c953aec27b63afe917f1d666e6d6fd52630884c32491c09e6144e1bf31441087a450139e2a2e423ef54b7516ff50ac8fd5a73b8aa5275e65070ec2f185d4733292d3621ed94396b8c55"}, @generic="068a4ef1", @generic="f2346014a7ca1c1ed5b4c33b6ba58a4fb6abe2bb6860e03ce8e15eff8e2240174db2e1c4332c119cbb18621151e6fed4fafc85ec45e8736aed98ca08854681747555dd5e4ac501772dc2565411e423e7f9f422e950a0d3a9f90a6a18b9da8fbae41cd1455899928e1971f80dcea76512719911b4e999bed57c13c56b83acc2b94661c6dd20f5db3fd67db0f4a82d1f4c3b828e0f43e0bbb17475bb1b9f8a6c1c75afe918f1481578b43b8bb509c65448c0a989987b7ed43fc5129ff4dd8ac726bc4905c76602ed2801e6c031567a3783e43d362536e705dcd4e188b04579c96e86749040fac8f14a0e23d4c7fea6359f603da0909e99", @typed={0x100, 0x76, 0x0, 0x0, @binary="620b1c1f14f0fe12878c79333a86333912d856e56bc6b8873fd022d0bfdfe5bf514ced5f023b8b768de9cfccbe7917f0c09129f72c1170e2786d5af88659f1a094a2dfdb6fe6984533982f44b947232323628d1c39b9228d3da449707019da310acdaeb811499aa1ffef242faae5e114810a803d611a09d32a33fe400f52ae7983dfff46938f38d1b7814237fe344ed6fb21e64a6b0900d6ff6230866c9c693edc599b366bad9d7430c29982b73cb9249937d50e63726cc24990c44b740f38ce3d9c0a0d6f1d90205a21ce7d01db40f7d42b3a7a552c3c8e2dee57bc690a0c26e7fdfec96a4cb7733c325084f8d70fde144ff597e4910e43d11939dd"}, @typed={0x9, 0x53, 0x0, 0x0, @str='!){%\x00'}]}, @typed={0x70, 0x7a, 0x0, 0x0, @binary="ff9b2923f31125773055b55b15ebb976f336c803cf1f3daaa92f4d07c5532463335e76b1d9e64e3cf9def02864c99674ec239424ce363aac7b8438cb2caa3a0e6de6c9a949d4c027c5bced722d8ff4f92af8a08e116546f798c2d8b53791d91c326be57c1afc14094f3466c9"}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x1c, 0x40, 0x0, 0x1, [@typed={0x16, 0x28, 0x0, 0x0, @str='./cgroup.net/syz1\x00'}]}, @nested={0x1067, 0x3b, 0x0, 0x1, [@generic="2736c8e3eb31558bddce9036483d06d4f42115b92baaed83d51b7709a58d9a352addba7adfc2728edbbcbca06e87f9f606980b0f99cd99f8dbe08d259a13e707b18dfd0af3e87503edb6429ad10ee2a4d0d4cf6b5184fc62b21ecde32bc6d74b843be5adff4e884b6f9cbc7fabebc195b0240635c79ac7fdc7a904bf9ee749c0eba160", @generic="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", @generic="b6b27a13453621bb39434ad8a56efaf8d19d704a52f63d604c04738c91d6fab67ce48037e70fc94ffe64fb3b482ef9de851ea4", @generic="2418d21511d056114772b4df8e6c0d92389bce0de6c21f9ba6c3a29c1e4b6ea057a02f23e6e3ac1cf2d7aace03"]}, @nested={0x10c, 0x29, 0x0, 0x1, [@typed={0xc, 0x7c, 0x0, 0x0, @u64=0x7ff}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x2}, @generic="cf324ccdc3f20daf9216d37775ce70d753d607397fce0811e4298eae66e3686c311fe4176e05adb48ae5e47767aa55981f2f4ce62c232b9f1fd4605cb74dd22eaaf1c661119529c4badef16830f4534be76b71b7b14665d0ab1990e8e59f33eb85d7bffa1a6a621a740d95054fd132d6face7677ecfc6c249d891282d97d366b9b08fdb618964a6824bb14d44a842199ca98d46a83a63bb79c7233745af739bdaa93abfaeaf493117044c7b4e3fb608ee275b3e1bd8302dc1f6cca9c7e4ff5d5e0fb25caba1634a0fe8e5ec071a1b50593702409701af9bc4e7cdc1c8a3caf3387538e9f7b3598acefa04cf7e2dfcfa9"]}, @nested={0xb3, 0x18, 0x0, 0x1, [@generic="aa0bb9920f17ef5497948e06e3191aa8e3", @generic="5dc889097c7e404965fe03b9894c389c3f3ceccdf0a1e18cfc587f4ae2de90624b25b728c8cf1b0632a1eea071c59d47defdc19cea72cb9dbd045246bb3bc8c0178d79aafba1edbbb82f594f87309a6b95366409b0ad42cafa2a672ecc861b2eabe414", @generic="6219e715b6f23ceae1fe6c7a969ec37edead268e8fcae09a0d2c9907f6f3aced48a5235e2a6db01b0a1e9d2a3325112acae606956c25bd20cf8b1a"]}, @nested={0x23f, 0x63, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @ipv4=@loopback}, @generic="2e1e97021ffd670236429991467356ce7bf4f07db45fe8dc4eb16c584af25b61f21dc465c9f7f09ffff7465312cc59e69f063e55ba9fc4ff3046b27c34ab353ac237ec2f360600fe54ffb2410e2ccb6e08654f1d06455323463b31816e6b5fb6d5f6d93f3c2308a1455eb2946f01fcff22aa043d", @generic="d2a7612a85d215b3d804d714a8795269a3bca5af74a5fa56116c93684b33c920f85dd0ec0b936e7809235c08e819eae582d959b679da76d5daadb707174f5622edbc1e0bcdeea127bc9f5fe9937005db96961c85da04abe9b60f401ad1450f467a4af09fa5d8e2e26b66543c2dba8b01187e628de290f85d2ba957256a38ea14cb58012dad7978de13e9afeb82616ea218e66bb2dd1f9abed0af0be33405273ec0989a4d3f7876836713ac3b6dc752bf590ea8f2c6", @typed={0x8, 0x16, 0x0, 0x0, @uid=r7}, @generic="e176b85edee502dcf1ad85", @generic="4e41cc815c6363a1fa301a500fd7a595892bb5301989ec53f0c53a03ae723c5360061ef7c9dc04f7f6a80e2264bf3f84abd33476732adb1253ac5998259228e2a0aaab50d31c8a901bf169076ec14899d8c3c88c9916f5d7eacdade0e1dac614368f6e7c57779966fd23141a09d3ee297a6ca6faf04eb589653d2b2ad75dc45fff71e0e62bf13d802a1c23ec4b4c6c0b75aba13f1a99bb0635494d3b850d83c60b37a83e431ae8f9b4988d97c983c877be", @generic="ef5a4e6b1d666eeb53b1612342bfa4e07be6ed9ca6fab7c7c4616d3e1e96cdb9f0a2e98ee387efe087a3a4cf499dcedbb600e737bf092b42f579c932cecec6a41d7a05d63b59"]}, @generic="d52b16ec34a8eb27330d1a"]}, 0x1990}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@rand_addr=0x64010100, 0x4e21, 0xc8, 0x4e23, 0x1ff, 0xa, 0x20, 0x20, 0x2b, r6, r7}, {0x9, 0x70c1cc39, 0x97, 0x7, 0x8, 0x9, 0x4, 0x4f8d}, {0x0, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6=@local, 0x4d5, 0x3c}, 0x2, @in=@empty, 0x0, 0x0, 0x2, 0x4, 0x0, 0x9, 0x1}}, 0xe4)
r8 = dup2(r1, r2)
ioctl$int_out(r8, 0x5462, &(0x7f0000000240))
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0xd, 0x6, 0x108, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x44040)
ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000280)={{0x4, @addr=0x6}, 0x8, 0x6, 0x1})

21:34:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r4 = dup2(r2, r3)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x1000)
ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000200)={{0x2}, 0x8, 0x81, 0x1000})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000001c0)={0xffffffff, 0x8, 0x10000, 0x6, 0x1}, 0x14)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

21:34:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:38 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x39)

21:34:38 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
personality(0x800000)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1a0)

21:34:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:38 executing program 5:
socket$kcm(0x10, 0x2, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="95c40000000000000900000000000000000003000000001c0018000000006574680176657468305f6d6163765f6170000000"], 0x38}, 0x1, 0x2000000}, 0x40)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3a)

[  848.651651][ T7243] kvm: vcpu 256: requested lapic timer restore with starting count register 0x390=1610052933 (25760846928 ns) > initial count (17011569376 ns). Using initial count to start timer.
21:34:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:38 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0xffffffff, 0x5f0d4764, 0x2, 0x8, 0xf5})
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x3, 0x2, 0x4, 0x1})

21:34:39 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3b)

21:34:39 executing program 4:
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:39 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:39 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0)
dup2(r1, r2)
ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000))
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x8000}}, 0x30)

21:34:39 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3c)

21:34:39 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
r3 = gettid()
tkill(r3, 0x1004000000016)
r4 = gettid()
tkill(r4, 0x1004000000016)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
kcmp(r3, r4, 0x0, 0xffffffffffffffff, r5)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r4, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=""/33, 0x21}}, 0x10)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:39 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3d)

21:34:39 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xfacf)

21:34:39 executing program 4:
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:39 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:39 executing program 3:
openat$thread_pidfd(0xffffff9c, &(0x7f0000000340)='/proc/thread-self\x00', 0x4000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000080)={0x6, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x104)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x2000, 0x0, 0x4, r2})
r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xffffffc1, 0x400000)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000240)=""/131)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x1, 0x0)
dup2(r6, 0xffffffffffffffff)
epoll_wait(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffff9)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r7)
listen(r7, 0x400)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:39 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:39 executing program 4:
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:39 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
write$binfmt_misc(r2, &(0x7f0000000640)={'syz1', "5f76e8c6d6d7f689ba605d1a6b748e642dd91f593c74c314cd413fee7e2e4b3e972d281dfd498630bca5dfe24a7418ffc2e35c686bb1a4cbe1a7"}, 0x3e)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000002004e20ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b183f4d00800000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004e21ac14143e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a084891886787ab30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1414bb000000000000000000000000000000000000000000000000000000000000f900"/1140], 0x48c)
r4 = dup2(r2, r3)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000680)={0x5}, 0x4)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000006c0)={0x6, 0x3, "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"})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe4)
setuid(r7)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, {0x4, 0x1ff, 0x8, 0x3}})

21:34:39 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x3e)

21:34:39 executing program 4:
syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
uselib(&(0x7f0000000080)='./file0\x00')
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000280)={0x1, 0xcd, "bba320ba7af616b2ad3353d098e5e929e30a20fbfc854ceed60b1da0f0308261ff7d89816a73802e4ad037efe1aebf17009d765303ae8f64663c1364d61ef78031cc5c275bd6ab29f2f50fe94d319ac4c4c5f55aea396291cc20825b8060871833d53cc2658bfce98dcb526b92ca40d63b99eeec5fc649c8e50163aee6aebf9cb7f181996c0d76d9229f7425982cae3e369becb7075297414e9c1fc9cf2f02d3b356c3e119854ecf61ed02a507c8c98c85a54b8eb0b29c5c49b295a602769adb54b86ec575a254cd5a83d7013d"})

21:34:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:42 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x41)

21:34:42 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x10c01, 0x135)
write$FUSE_DIRENT(r3, &(0x7f0000000040)={0x108, 0x0, 0x4, [{0x0, 0x6, 0x6, 0xfffffffb, '-/^*@+'}, {0x4, 0x7fff, 0xb, 0xfffffff9, '(:[}\\*\x8c[([)'}, {0x1, 0xfffffffffffffff7, 0x1, 0x7, '\''}, {0x1, 0xfffffffffffeffff, 0x1, 0x91c0, '/'}, {0x5, 0xf2, 0x0, 0x7}, {0x0, 0x1, 0x4, 0x6, '*#]('}, {0x1, 0xa1d4, 0x1, 0x6, '{'}, {0x6, 0x6, 0x0, 0xb85}]}, 0x108)

21:34:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x28aa, 0x240402)

21:34:42 executing program 4:
syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:42 executing program 4:
syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:42 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x200001cc)

21:34:42 executing program 5:
openat$dsp(0xffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x60a, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0xc, 0x6, 0x404, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x610080, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4c37}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x54, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

21:34:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair(0xb, 0x1, 0x3f, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f00000001c0)=0x3)

21:34:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:42 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:42 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x201, 0x120)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nfc_llcp={0x27, 0x1, 0x1, 0x3, 0x40, 0x9, "73a3fb387a1c16e11a895401d57562d0bbc6afd9c39613444be6c54e9dcc94cfa75683273f5bef614eca5d468f6df4322fd152437628bc8b47c68d37352f15", 0xc}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000240)="8f04f1cb61f9f64e3b329cee9c49f22920bc82558b8620124a6a7c03f960367ae955392cd0e7d2fc9e78c7b6d2b350e28c8036d0334a3db2d645d3bf8db7796b2464ff521255bd22d34b187e1eeac9e28129333f11e2a6961087c0b30fe26a547b7d67186b359503f1a0d9919935a9df9024cffd86177cbdd037d6a2228820e5d99a7582c1f3a0b0c91cfa2d7efea9f65dc88b134cc6c11cb360822b44afa6d2e8caa6cc19c5be1c0e78ddb48d8045c6b4a95f3732ead7806db4a2a30ab21a095dacbce9e67c01c630b1a180cc7df16164a0e550c5ce0b67b1b6", 0xda}, {&(0x7f0000000340)="521272687c57cbad18d85e65f3533a5dda19f2b1c2f49112568a5d895fa5eeea1dad5bb3d5022fb0d0c74043c6de1c57f8d345", 0x33}], 0x3, &(0x7f00000003c0)=[@timestamping={{0x10, 0x1, 0x25, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}, @mark={{0x10, 0x1, 0x24, 0x5}}], 0x40}, 0x4010)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20280200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '$#\')%\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c001}, 0x49f9046708d33f8f)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:42 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = timerfd_create(0xd, 0x800)
fadvise64(r4, 0x1, 0x4, 0x5)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r6 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x681)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r6, 0xc0c85666, &(0x7f0000000200)={{0x3, @addr=0x7fff}, "a2d7d8564a34ead4f588c3eefb0248d67c6a23dbc68743d1cb8d98e3ef214a98", 0x1})
dup2(r3, r5)
r7 = syz_open_dev$video4linux(&(0x7f00000012c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000140)={0x0, 0x2})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$capi20(0xffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x105000, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1b7401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
pipe2$9p(&(0x7f0000000080), 0x80000)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0)
write$P9_RWRITE(r4, &(0x7f0000000280)={0xb, 0x77, 0x1, 0xce}, 0xb)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x32a00})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

21:34:43 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:43 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = accept4(r2, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000080)=0x80, 0x800)
setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f00000000c0)=0x40, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

21:34:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f)
open(&(0x7f0000000080)='./file0\x00', 0xa0100, 0x4)
r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x8240, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00')
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})

21:34:43 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:43 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x183802, 0x0)
write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x9)
dup2(r1, r2)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x180000000)

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:43 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x42040, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r2)
r3 = gettid()
tkill(r3, 0x1004000000016)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe4)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000000)=0xc)
chown(&(0x7f0000000040)='./file0/bus\x00', 0x0, r6)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r3, r4, r6}, 0xc)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000000)='%[{#\x00')
dup2(r1, r7)
setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88)
getsockopt$sock_buf(r0, 0x1, 0x2b, 0x0, &(0x7f0000000b00))

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:43 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
eventfd2(0x9d, 0x80000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
connect$netlink(r5, &(0x7f0000000100)=@unspec, 0xc)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r7 = openat$vcs(0xffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0)
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r8, r9)
ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000180)={r9, 0xffff})
r10 = dup2(r3, r6)
ioctl$HDIO_GETGEO(r10, 0x301, &(0x7f00000000c0))
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x4, 0x9})

21:34:43 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = gettid()
tkill(r3, 0x1004000000016)
r4 = geteuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="37000500", @ANYRES32=r4, @ANYRES16, @ANYBLOB="100002000000000820"], 0x3c, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000080)={0x7ff, 0x3ff, {r3}, {r4}, 0xa5c0, 0x1000})
dup2(r1, r2)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x10002, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x7fff, @private2, 0x8}]}, &(0x7f0000000180)=0xc)

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r3)
r4 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffd)
keyctl$link(0x8, r3, r4)

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:43 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000000))
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r4 = dup2(r2, r3)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x80100, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250200000005002a0000007a0988000008003900198b14fd01000000150000000800310009000000080034000001000008003a00090000000500330000000000080039000000008008002b00004755c82e4465aaff394c028c3b628fc714876f503b61c5cdb4faed329b82d3acd02f5f5610fd31c6d81b489198264c8f99cc46477eb70cd8"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r8}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={<r9=>r8, 0x0, 0x200}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYBLOB="e2000000846282b76909111c6792f30f4174a940723f96bb0c4d53b3eb097684e34d0346cc3c287c378507f93911df6b8b556737b4251bff8af1c86c8c0c03acf7b54c9acf5f80145594d89882f07a9cce075d7d29c3f10eaf105c6f16ecf62e8ae121795936b419659ad1427c5dbd271885b590873b712d383d516a08044c46b55f9fb1c0970300000058e8ab90405b4bfeeb9bf8b91386437b119eecd43e231ff1e82c645d87ce17405e24edd8caf2fc03d2a2afeead7806f350101cc30c90a1754f0fca599b99236531ff22cc968e76b16c62f3492ceeb1084766dad7febfddc770d5e0de"], &(0x7f0000000380)=0xea)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xc0c22be8cd2450cc}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x4, 0x70bd2c, 0x25dfdc03, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x24000000)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

21:34:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)={0x2, 'netpci0\x00', {0x1}, 0x8})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x10000, 0x0, 0x8, r2, 0x1})
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f00000000c0)={0x1, 0xdef})

21:34:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
io_setup(0x6, &(0x7f0000000000)=<r3=>0x0)
io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
io_cancel(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0xdc, r2, &(0x7f0000000080)="0180bb287f", 0x5, 0x5, 0x0, 0x3, r5}, &(0x7f0000000200))
inotify_init()
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:46 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:46 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x400, 0x0)
openat$hwrng(0xffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r7, 0xa})
ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r7, 0x6})

21:34:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:46 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0xa42e6c5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:46 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r2, 0xa})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2, 0x6})
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000080)=0xfffffe00)

21:34:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:46 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x96040, 0x0)
getpeername$tipc(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x10)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="660f060f38f1770bc4e3056a700007ffcbb95c0200000f322e0f28c066b857008ee8f3ab2634fb0f01c2", 0x2a}], 0x1, 0x18, &(0x7f0000000280)=[@flags={0x3, 0x203000}], 0x1)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

21:34:46 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
getsockopt$sock_buf(r1, 0x1, 0x7, 0x0, &(0x7f00000000c0))
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)={0x16, 0x8, [], [@jumbo={0xc2, 0x4, 0x7ff}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x10001}, @jumbo={0xc2, 0x4, 0x9}, @pad1]}, 0x50)

21:34:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x28000, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000200)={0x8, 0x6, 0x7fff})

21:34:46 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x32, @rand_addr=0x64010100, 0x4e20, 0x3, 'sh\x00', 0x1e, 0x0, 0x5b}, 0x2c)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:46 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r5, 0xa})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r5, 0x6})

21:34:46 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:46 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0xfffffff9, 0x1b, 0x1, 0x0, 0x3, 0x2, 0x9, 0x800, 0x8000, 0x4e9b, 0x8, 0x6, 0x101, 0x3, 0xb, 0x0, {0x1, 0xb8e5}, 0xff}})
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
fsetxattr$security_capability(r4, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x2}, {0x3, 0x3ff}]}, 0x14, 0x3)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r7, 0x5427, 0x0)
dup2(r5, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc004240a, &(0x7f0000000300)={0x2, 0x0, [0x0, 0x0]})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000))

21:34:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:47 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1402, 0x0)
ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000080)={0x0, 0x80, 0xa74a, [], &(0x7f0000000040)=0x2})
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:47 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = accept4(r2, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000000080)=0x80, 0x800)
setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f00000000c0)=0x40, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:47 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}]}, &(0x7f0000000180)=0xc)

21:34:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x10000, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80], 0x0, 0x32a01})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:47 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:47 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/238)

21:34:47 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:47 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x8, @private0, 0x7}]}, &(0x7f0000000000)=0xc)

21:34:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:47 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:47 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ashmem\x00', 0x379f03, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4c2103, 0x0)
r2 = eventfd2(0x7, 0x100001)
dup2(r1, r2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r5 = dup2(r3, r4)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r4}, 0x8)
r7 = open(&(0x7f0000000440)='./file0\x00', 0x101200, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000400)='./file1\x00', r5}, 0x10)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r8, r9)
ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000540))
ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f00000004c0)=0x3)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0xb1, 0x5, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000000040)=""/10, 0xa}]}, &(0x7f00000001c0)="69dcc5e423f0b54307fe5896cb6893285edb144aa8ddafffcc7733b0d05db6fc249c4961894deb795006144298bd9ed9a55f22139048cd583ced79a2f389c3ac16cf88b2a06487e4808ad3b7c72cff0dd111e48812c518abb314d17973c993a8779fe5314c52cbcb2a8c3817113c7a69d1d78dbba0901b4f0111e34b8ef1f6f2950395c799d48bbb2407c0095889e1183fb681e79566d1712d980953a0cb31b4e2b233714fef406e5ec7a6a1c454506ed9", &(0x7f0000000280)=""/172, 0x10001, 0x20, 0x2, &(0x7f0000000340)})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r7, 0xffffffffffffffff, 0xf}, 0x10)

21:34:47 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:47 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = socket$inet(0x2, 0x80001, 0x84)
socket$inet(0x2, 0x80001, 0x84)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
r3 = dup3(r1, r2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0xe21, 0x414, @empty, 0x8}]}, &(0x7f0000000180)=0xfffffffffffffc95)

21:34:48 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:48 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
r3 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x143880, 0x10)
fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x9)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:48 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e21, @multicast2}})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, 0xc)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:48 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0xa, 0x0, 0x4, "a42b18459bab365f4f18480d2faccc357c9fdcfc18b98220112d44cbb288635a39dfbf7fb8d68cb87672eeaacdbdf38032a7513748816e612ec710625b9729b5", "a7061e2a465fe508f5a3cdc693782b218cb95648e6f68b6e7531533ee58fb9d16751b4de3e5ba342e17e8107637011c7f180c3c27635b7987a9571fce5b0e161", "ff13e358e24bb849440b63d0c9ea88ecd4a599c47fede33cc5cd129d1eb24026", [0x8, 0x8]})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000080)=0xb1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:48 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:48 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000b00))

21:34:48 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
accept4(r2, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x80, 0x80800)
openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:48 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:48 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x401, @private0, 0x4a800000}, {0xa, 0x4e21, 0x2, @private2, 0x80000000}, 0xd9, [0x3, 0xc0d8, 0x1f, 0x2ce7d383, 0x800, 0x200, 0xbc8, 0x6]}, 0x5c)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:48 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = gettid()
tkill(r1, 0x1004000000016)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/nf_conntrack_expect\x00')
r3 = socket$inet(0x2, 0x80001, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8)
r6 = socket$inet(0x2, 0x80001, 0x84)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000240)={r8}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={r5, 0x7fff, 0x4, 0x100, 0xfffc, 0xf001, 0xffc1, 0x847d, {r8, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x100, 0x6, 0x8001, 0xd433}}, &(0x7f0000000100)=0xb0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@random={'security.', '[:^w+\x00'})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff42], 0x0, 0x32a00})
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r5 = dup2(r3, r4)
write$apparmor_current(r4, &(0x7f00000002c0)=@hat={'changehat ', 0x4, 0x5e, ['/dev/kvm\x00', '[:^w+\x00']}, 0x2c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x74282, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f00000001c0)={0x3})
write$midi(r5, &(0x7f0000000300)="90570e9ffba6796861f58f860c83355dcc289d4598722da38eb92193cde16f33c3dbe7c615569117c38cdcd27aeb1b03daf5488b5503f7aa8e788db5be020a9a451be06a2b3481ceae463cfb79db18d2eb2dd1a801df6efbacc16ac6bd91bff1ea7e2caade361017e6880eadccc32c2bd153791e43da3b7dd7ae2c759fc43cdc6d516fc5c736c0a66ae9f032ff4a420a6fee27a1327b47cb3fae977dd695c964d6b80df48243be6a7cae59333b3f2d98d15c8cf9c581ca90333d77ed74b84014964770e26c8ab20f9d511e1f914d879ecb99fb56fff8fd10500a4267", 0xdc)

21:34:49 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:49 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:49 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000000)={0x3, 0x100, 0x7})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000))
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000100)={{0x0, 0x8}, 0x22}, 0x10)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000080))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x8, 0x0, 0x7f], 0x0, 0x32a00})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

21:34:49 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:34:49 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x0, 0xf, 0x1000, 0x0, 0xfa, 0x200, &(0x7f0000000200)="c30ad3b392f23b0febbc3856ae0341372b4a78f42472fab6dbdf5ce85f29c0c69d78a0daee3fde463141eb8881743073787590d4c466bbe64f7abaf0c919096328c5f7814577c6443d00e5682db7fdbb00677502b8ac4df54d63f228d99803fecf9e11739a085476dd548a8179e95343ca74ec3296c5b2509895ae3901adb2823e308dfb3293db11397ac539756f3e127e95dd66b6e78f3cf4cfe69b61b8059d78826a94c4b3ced53da3dc1868ae570988faa461ab7712af45579952798b7a69bbcc57e03a0bfbc6c347adc4197a43923b4541ddab32a6147de541081a7897a0b5a40ccd456f4fd861b9ffefc6522a81829649120a1ab7e2e5ec"})
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:51 executing program 5:
r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x15b)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000000))

21:34:51 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:51 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x20)
write$capi20_data(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000400838201000000000000000000001043cc95979b892264070129d1b57ce6c436b55936b02f4dcaed3eee9e5b0773760fce6980ea6f245581db609e190308e8a1cad264af0fcd18e8e1acf98bccbfa9fcb9068f3f96f64ba272405ebcbe2a55d94da4f027a1858d1ea31bb4534eb9587b404911aca2a1196797e2992e853ade3e239b1bfe66889f2737f4674969d2dbf7ebea5b017355aa4df79931c1c9f9ccde575182dc5505a666dd5c48d7e15a598f04ff6e73631c508f5dcf5bf20b5fff3ff80d6ee42809e5977689f9e6eed5c1b38d6bfaa94c48535ff3a862b91d066cbc53941a1219960647e4fb81797677b6b7f763546a26a96e4909125c275b46c37791098e36e99ed89c1c9095eb3b07ad7428e7b431f0f4d9d03013e3a4f2803bfbbca9f3e977aa204e930290cc02424fee74e3d82e03806d9b46c695c134d4fd690ab3c2b9b30df87576eb372048410c879f317a2a1457b76fb6d1ca00d1dd794e28850bae1b32553ee8831fe147131c431ed5c2ac372c3ba2c28bc9bf38429d8d4c779606481dc4533cc13823cda81ec5ea342ff2096521c34f66b3d50aa9a3307bebae41c66262be18a4853c03078f44635cf43822e8b1f8989922b801e8f0187d717618a1b8614957422773f5e3d537f912d4c3692447993dec17f3a8b652b690833022dd2c43192fd2bf969d0f48d80d7e48bb00ddf2c7604db8ecf9c36c3bbf0633a903931f912e9d52a015685609e1ca700d7e91a01801efea80dcd1b6527892be3df4f72a96c627334fbf7477ef6b074ec44f3827461142ebf3e3d6d95e119e19b0aaf1c6f1d254f1186391a8051adb29952cff7c3fa3f06ce7fcdd720af10749dd4560ef8acc32f611af5f2045e3bf2194d07f395668ba389bc80c4ad29d5585f2f9021a799161e7d032ae516bf6cc62062b9d9f9fb3dbda3c2bb649e8974ee43fbf214e036f49f28095b4a55c360b2a44371105d4fe7760446758e0dce9538395bdaf0655144ded7071596431618f1d18b9bb20f92cf170adaed422f8d215103a4c084b7e8da43581c583ad3da0ec85a47788793bb2619489906aeda0298f5b9ec1a744d024a92599475252713a2d7996c653237d618a8f5e0015a74f164faf9816642916a1fad5d9559e8544be723c0a8647571e3f29e150562c31ca837919675b567f0b4292bc626a9a8ed1c266094059183bd0042f7b4c5f26093a0fa9121334049c98d038dba7eeaa529af2a5383ad11f31209dafd6e992eb5bddeed7a9983ff1cecc58f8863ade18fabfb575848972679e603f26231ba430185c1fb98615132313168beafb237d373ee9191279f896779104d43a49c45e0e02cee242b945778d4fee581d58a858849cffb1abffbbc2f852c9e1dd0c26b30fe6b1a9f89665367e0f5dba64143e55cc990c2d020719a06ecb9ae54179402a68b329284e2d4b07d94692df389d989020af50fc1ec87d8672a0dc6a46612782376bcfe2b1461b4e279d7bbf88fd8541d54ca161eb1318bc5dfe6602b9ee7d8fa75416c8ef941a37ca6187f1febf7f609e043e49cb341a444e1ee059fa7fb625d6d54dd7f5100cd379aa696d56d091b5b630ea057fb691a5d51d9d88bab9b879a4fdca2db0e32c31fcb6f748d0ff965e09dac7e43d9cf9d06638df0f44eb6911b8770c5ece262e7a395870b4313f86ad4d363238494fb3159063b706f8d1f801ef422ff063efbe5986025d36cb4bf9237e53e68e03d78ac5b1e4b7a890b921b4a3563a54379df9bedd72e32bc8ad3fd4057bdd7d0bfec103d51dc23895a140f59fb5315b1141c73bee713be4d7c20ef4d0c5ea345393655c0dae4409407d05f071fc98a480b4862d8dc7b42957b7d381e769cc5fffc900d66f21ca6c3035ab5963cd1fb67126602008dc8cfdaaea27b88d5c0a383ab3013de5f5034d940ba2b00514e8868850ea4e3f2ecea469f5c1881e43897f94c6087748107b508bd660f7f70bf4fdb5d0a65c05473ab418ccf5ceebbe985d940e56fee9bb3d69bb6974881bf5202a2155c28fd45e40fda4f75050727a71cca65503a0893973670f8047b6095ca0307d9eadb78845db4a5c84b8b12934efe1a0c0a2538a34d5299dc0de8aa79f0d0db5dde47f5c42be389c167c947e3caf2ecb9839af620bb0d9c010605c3db2094ee4526fed629b96042112e516eba9ad33b81e773388cf43d40ad83fccf346752d9b201cf79ea72dee990bf2acfb066262e8d6898d70ae44a43c767e7f56a891367d6be3679812c5f565007ee6ccdb2f806f8b77f370fa21be8bc7ceeba3c1cd8478651cb5660d4430989be5e843e54d851e18709a9f3c4d9721f0686265898aeba617fe73472ac1c26cdafefe72b794f182f6a5f3fe67334eccd52af334ee7786db23b6ab15b1aad284f233d50f0df4e0aa81f4c7cd1d2a7418e9466e30cc75f082cc2cd9ee612f8374e3f9f22076b370c13254dda28dc592db0259d54fb1efa9991964a01eb7e4b856cebd9481f0700ca313e7bf46407f5a316d7db4748e819b98dd50b1bbc0dad6073b49b8cdf2e448d4919fa51f9ae4e6b737a249cdf2a27f2cb90eba6379323393635e412a2a12c027bf9f70de2dab04785fbcd663a3971c839c79dfc8c5e5e29dfa53f16281713f7552705e45161ec4b668d69ca80470d0c0642a2d24cb0c6386c7b64027879990926c36e1a09a61d896f5a9942d4c25ca8b0f896d3343bc011d4e7d30168fe041be27ff6740a62a8bc2434a1fc8dfe7c99cdc5a7212b4d959afecdd06803f26b23adc609ba118ff3ede26a338e9f8937c3194cf33f59cc1946ada7264b1ba4b0ab78b4374e969b2bb59d5daf1fe14746840688f5a25dd41dd5ed1d04593e70e83b7f0184e5b5c21a021cb57d889a21a926265a2bb1d873e235281bef02fe55a28f09b7dd9ea2e28e9564ff153156d2361e6824927ebfbe5416a6fe8cb7dbdd3423fcf0d98ef38a3cff471ed06e13837c79e0c3ffbb39c65471bf4f33a1313d263b4bd4bdceb789ea5f3fe5691a46bd05591e53fd2f9dc1b40d69b7ec246563829ef3898b3fc68a0163bc594a9869cb535b0af64d588cd88fae388a1a49b8faf0da1159df91b77e8f9789cced3d8a8c55eada18f977a059b908b412916faf85f565414d0ca6d337364207ed880c84ec39f185691c7a9e54898dac40ee61d367eb194a12e6f704333e384d23cd7ed3ba5f121b5fe8b9fab2c1e9557d34da89205f75fe55b8dc1582b0db389c505330a6deaa66e9b2d00062ea59255a067e57d82c413562c70d947fb560d98f0eebda5d6dcf41d746b3a1ab19dcd504212cac9dde4943b60ebb5b08dc143c345377d6c666d5ca46f2c50d4f0f99eb1066ff65144dada86cb863c33f797b599a967c895af6a40046e079dc64ea6e13db7238488b3a5e7308a5f6ddec2d37779e44cb4e8d565e3fdf3fb2d2f9b33799a07bfd3995ddcf54f20420233d1015a9f5f054832ac33aa1bf565bf015a86f3cc8d30554ae73ab11d00d4ae99c952f861ded11b6bc820bb7f41f4967997f92cd6beff0862de560c4e3731610bbdde8d83583c33430109c01e0f61b22d44503201035266ce7d6419201d3f32ca36ef61df769c2c8f5ca2d3ba586d429ab1dbfa909045455abca7c607093d45ff440ccc358d8a5f78fab459e38a220c9adb66307ffda2a808af8e6738925ed5ecd50b72a74140263e321d4d249585c8f68eec921309d81f8bef1e5e75f3ca88717412c4f68a901110e3a7407d42e90d7a564a187389d84d23bd9f06bede5935c6afa5f6d290cd91a7ea9a273058765a521f2d436045610a882b1434f095e233d0ff8fa567a0e8f70a60fce9344bd4df687bedf64dda73191b9660f1f6f7e0dd5da74d844a5e329b269f781ff0f0fab0c9d9a0ee772324275494b75953323d5c368fd2bfc180459cbd978f067024c0ffea05a0672f28f4cce250a31e5d182ad99b26bced00d5dbfb2c2d2b06a8b89745ce5ac1308af671948ce6b0b6a484c5a1b6ffd259d211599308f9d4fe58ceb3228e981fd1db1babc1dd2a8e558752fb65407d60396d56ebde4efad04366c43209020b6b6245f4e9d32c359203a8b257ddf404417557193ce28d76968dfaa2f3d0b7170667655e6f0d94d5f7fd6ded1b3109d164e20962467d24ffb2bd7b2a1974e7637cf538e55b966e8c7fd6871b0e26e81362f18898c2ce71f687b9a31de6b624ca9e40abd6963a3ce53a83b4bb8707d6ff31869fb5a208c885d6655ffd95a62c03888a3c6ee2ba4fcb86a9aa505ed8739d511ad2c4d80cfdb977b54d4e5f6df76a096cc68053defa9a8dde26b326f4d0ec5f40c73471277815fbbe13c3d72c332219897b302b26e266de48067c67310f2053230f5c12dc5dada130f7981a3f38af2ba918d219bb715f0623368a30bee06d25a329174eefc3e7ebad65e90528aa91af613cc0bdba5bb313f161a6f6fc40f16c4bd9e120782fce094c5b16f5f18fcffed2059c5e979f353d9d9637e8f315c4e33bf4f0bee808482edb888ffab60d6f02e3e0ab0b4f2cb267eb4fd9000649f2d52436790c99c98cd9a36c0ce404b5d4a676fa60b74ebe8f54fdac6ea5572a368f95cb3be7a71ee325b7c59ec8025e2118a5107702c6c6688c9543b9335b56d1f95b1b09ff89a5eaf2b70220abb0f7a1e0b15f34ce603812ee674b2f82306c8710700daf785e3ef683c22afa928e70bee2ad1a3a4d8cbdd806f1b6f4a034d380a764e7adcc51c55b86cf39012d310bb00eca47338466701506f46235f551ce0b6eed295d6ed75200657647f6891bc480d554cc1ee3313f660549c58fc2a14e677eaf3718bbe9e787b9bcaaf9ebc4570222f6414a76ac5fe084add120b8abf06128d1e45e3067917433956b4a59768b3595bf57a0b29c13979eb62e83f53b336da96f3acc895a4afdf6ceaf82e30211b4551a191f4c38cf5b8f8255c3ead809f74afd90374345c4541c4e9f9f3f5d6f309df4f33a497b7c15e192a5e1cfd1d4c204210757f526c5792507bf5c2d1bbed3c63240769f6e1524c07ad2104793c45992684922033f56bfcb928531e5a7fa0ac8bb46a3e9b4437979377db102698ea2448162bd431512943d66ee4b9acd375b0be3d2c9681b1c4c05301f97d9a1ce5ccae18f1f408120e7ca5343c2a2ecbbd878356e7d3c6871dfdf8c296eeb5a0724c19c893d455c473b24190c9cbcf6c468f0f9e0623e9e50c5cfc038112afae5aa2531525326d35900107b46ec5ff15a1c0b41a4fe1aa1c79797691f9c0939e4b1d8bfd6a68f7583fe44039f34aca0cce3cee52ff886e50d5def5774a67e23f47e002efc39987b07d9a7ea994bb579a708c9509aeecee37a01f2b38588935521536c92e5982351c3abf169229f97dc41d6a5e4cc13a622d92d6575e0c063770e93f8fdab4c1068faefc72d87b715fc686bd08cc90170c1cfaabc77002a8910dd89a093f72e4b089768313fd645b4608aa64754f96483097d9e29812022a6f19f31b627ecd1520d050f030751ca48d042ae0e29165d7f78930e4f1683c6f20f74cc4985e4e6dc7b5ff4a10a87bcfd5b18e9d201afffffffffffffda0dadd08f776bccd7a6acb304f9d69409c1664335aaf4756c65d6ba96e860f573b13b3d2efcc909349e12d56da22c0edf60a9b7cdbab906a5ddbad7cfdc8948099362d6fa074b9305feebe26d6cc6199a505f6bd6251774417872e6f75c8c86790b51f6a5dad0daaeafca566057ae975efedfff1f8ab612c433974e37e9626120ed18dacb49eb46e0b0566df01fcffc14f7c3c3752c63ad111df785dfc4"], 0x1012)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000))
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
exit(0x1)
dup2(r4, r5)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x15)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], 0x0, 0x32a00})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

21:34:51 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:51 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:51 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x20, 0x800000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r2, 0x1)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:51 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:51 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x7fff, &(0x7f0000000140)=0x2)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x210f02, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000040)=0x2)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
openat$ptmx(0xffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x6a88c3, 0x0)
dup2(0xffffffffffffffff, r1)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r6)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000000c0)=0x1, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:51 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:52 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vfio(0xffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80141, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:52 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000380)={0x11, 0xd5, &(0x7f0000000280)="f1ccb19f3825fca56a9389350579ac51516a4d240431b2f2277e9de0bcd02c113e8becc4603cc069e964e676238eca7041227c558962846ccff721685437425b2ce29395ef31be87d1881f516cc94cbdcc83f4f6f5051576e885ea31577c7440d92d000249e2e0e2069ffbb50fecfbc99300ad36a26734bc0b0275463b1b8dbe97b32186caa75c6e48a65d8022c01815cc12501945d64dac2751ea77e4f51c7a6aaeed20af98d68d9740ebf1d5f00d117f2f3c81d200354ebf1977bb5ba9617608e82db06fb19a632e34568b3eba01a4464c82aee2"})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)='B', 0x1, 0x2})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000))
r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14, 0x80800)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000440))
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r7)
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000080), 0x0, 0x3, 0x1ff, 0x7, 0x8, 0x4fdc, 0x5, {0x3, 0x2, 0x3, 0x0, 0x6, 0x3, 0x1f, 0x7, 0x7, 0xfd18, 0x101, 0x4, 0x3, 0x5, "ca341277b16c812691c9dea19b3dbeb0e173682cc8164ee22462d218bcfee0b8"}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x32a00})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

21:34:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:52 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xef2c)

21:34:52 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:52 executing program 1:
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x1001, r1)
keyctl$describe(0x6, r1, &(0x7f00000000c0)=""/149, 0x95)
r2 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r2, 0x0)
listen(r2, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:52 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:52 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xa080, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:52 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:52 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x4000, 0x0)
openat$mice(0xffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x2)
r2 = dup(0xffffffffffffffff)
dup2(r1, r2)
r3 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000140)=0x6)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x100000000)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x4b0682, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r6, 0x5427, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185647, &(0x7f0000000200)={0xa00000, 0x7fff, 0x6, <r7=>r6, 0x0, &(0x7f00000001c0)={0x9a091e, 0x7, [], @value64=0x7}})
ioctl$KVM_GET_FPU(r7, 0x81a0ae8c, &(0x7f0000000240))
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r8, r9)
ioctl$KVM_HAS_DEVICE_ATTR(r9, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x4, 0x2, &(0x7f0000000040)=0x4})

21:34:52 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$dlm_control(0xffffff9c, &(0x7f0000001b00)='/dev/dlm-control\x00', 0x40, 0x0)
r2 = openat$bsg(0xffffff9c, &(0x7f0000001b80)='/dev/bsg\x00', 0x680, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000002840)={0x23ac, 0xd, 0xa, 0x1044cf8a84b22632, 0x70bd2b, 0x25dfdbfc, {0x5, 0x0, 0x4}, [@nested={0x11dc, 0x77, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x1a}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@local}, @generic="0fb5a596db291c99c8981ecb32079fd80b69e911d401346ce9c2374f80ec33a942c4463c6aea15f42bf653f4f76812c6388f9d27d5a0e038ed1ed4cd0b28a94c4ead7b35fd09045001b2a9b03630755230be13ad0d26103a81395f5e39f9305add0d842b5f8d8223e699ccd702c87f7499a1dd2ad0c00b976917cfdeec768fcc34d5664e5e8e4905e5c2faa867b446c44273c3c365a79ecc8d109c5aed09109f9a7014ca9a38af18836a35432f", @typed={0x15, 0x0, 0x0, 0x0, @str='/dev/dlm-monitor\x00'}, @generic="43c17475fc38c86d9060838cce3dc43c62b57e0f3dbbb483ed610a7991a2f7ec60c0d1b603e49d4892dec21740702f33bd4d23e6f7873d07da7a79cdf2a0f77a3678ce42c84dcf2f0823570b2b372aee02948325781fca49ed6e3658f436c257311b1f1515984bf2a95438baafd6e8a560bb6eb87fc9981df75274f00e5339177cf40760921297beb56db5f0015b295c84dbdd1efd760460c4a719b7078862864d860e8cba7dfb5836f6898ceaa1cfdd1adceddeec02b4d1030a0bed150a2d18a3dd170e15862d96ebab9e4a467107debca1f5b74571d7cac233849a0365d0a39892957375a906dd75d9074e90eaf505001fd5", @generic="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"]}, @generic="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", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x1a7, 0x14, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x54, 0x0, 0x0, @pid}, @generic="1d287aae9c5551e0e2c396c4cf7931c7cddeb084274160c8e4f860364a33e07e706af4164dd04f7e9ac40b2e83bce92bfd0cb80003730ccb4a9ac328fa11920eda71fd8e81bfef058e9d8cb1bdf7fbea512c1071e4fa7c5cb76a", @generic="7263dfedac2b9aa9471440b1d76ded7acb84c059f5f68521d40be8cf4a50313390ad0e2f5dd35adfcc0eddd4c653f5b1531f449b06cad612d45c01d6ec81", @typed={0xc, 0x3a, 0x0, 0x0, @u64=0xffffffffffffffc1}, @generic="12a67707f5fc0ae4359875c5833aba54ddfdffeeb906e6dea688b5a08e76adc6007dbdcb24c410ebc5cb3ebe433ca468ec4fccd9cf1777604b6f1a03c4b7ca162ef0f87df55d1495996122f744b24209d2b52639388fa77aea1302dd417e2992fb56e0e388e9b3c6e5881fb96b7117ef1e7c4a19250381", @generic="4a428017e94aa90dcdb7411025cef884ecd4decde19c3c92e6e805c078be8bd4135cfbebfdf941839f8f32fa518ff4b5b4fe021cf656ce205e1e6fa2320a6ee773e2878d9dd90ed177d97f76b31e0a51d95842", @typed={0x5, 0x59, 0x0, 0x0, @str='\x00'}, @typed={0x7, 0x19, 0x0, 0x0, @str=',^\x00'}, @generic="c37562ad2e15114dc2dc22e0a155e0a401b4612f66"]}]}, 0x23ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20a40, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f00000000c0)={0x9, "7d2b9ab0d31a08882a1da940cea7e45d2eb40660ff5bca19c2ae5ccc4bc5e4a5", 0x1, 0x7ff, 0x7fff, 0x2fb06fb, 0x4})
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x10000, @private1, 0xffff}, 0x1c)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:53 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0xff7fffdc)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)

21:34:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:53 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:53 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9)
shutdown(r0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0xc8, 0x190, 0xc8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000380), {[{{@ipv6={@local, @private2, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'sit0\x00', {0xff}, {0xff}, 0x32, 0x7, 0x0, 0x1}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d3, 0x4d4], 0x7f, 0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3ac)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="085e9e77ec6ccfb1ae5b05c11282111fab2b249a8c554a8fc39aa72e00d2e984fe1478e12f07d32c8061cb394d3df8f630b397c6a22dab565e4268de3a4bef1f4bff21adae380be09d7802b6e6be89da7cfb64e3ee9cd26ed0a94a777164c8f2ba4b819468c1f0a2bf08893a1c53d0fc785a198733816cf5e313249f7c8b28ba2c5c759fd085ca1a8b7768e061dc6f5144eb37bfba5c8c7219c20503a83405cd82774fdaa2d47e8363fafd099a86aa916837556cc78d55224b8878ab5db3a2b0e92e9bd76248548d66c55d21", 0xcc}, {&(0x7f00000000c0)="62e35d29759478e177d57823abc9e084f669a739c4cab907e2b1987a6661ec3e6afc2bf0cca69b1a5f5657766fa29c86101a5c874ea2649ec0a6ca1e7f3ebd2532965b1f1fe991657b3a4e1740dd96ef8d1bb686ec1fd6bb02707d26d60906aa5671e54d9cf7a556d1dc3715ff444bbb4e045ff5c53348bad5b613c864886e992b540a10ca313b6ca88ee0b8665191815de2721ff90a0f0d16", 0x99}, {&(0x7f0000000300)="c342e8dc48ae5d092b36e29fb83d1b9189664674e98601c28d63a58ce42e43d1ae4b1df034398ecf2d35f4fc282427b0ad7bc88ed677256dbf4776860322ba5815cda7aa7c6834bda2f7a4a91dd9890d826f87cd6693a848f50847ad4c", 0x5d}], 0x3, 0x2)
fcntl$setlease(r3, 0x400, 0x1)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000000))
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}]}, &(0x7f0000000180)=0xc)

21:34:53 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:34:53 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = dup2(r1, r2)
getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)=""/90, &(0x7f0000000180)=0x5a)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x200, 0x0)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000001c0))
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000000))
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82102, 0x0)
dup2(r6, r7)
ioctl$SNDRV_PCM_IOCTL_XRUN(r7, 0x4148, 0x0)

21:34:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:53 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:53 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x430201, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4149c3, 0x0)
r3 = dup2(r1, r2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='virt_wifi0\x00', 0x10)
socket$inet(0x2, 0x80001, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
socket$inet(0x2, 0x80001, 0x84)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300), &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r9}, &(0x7f0000000180)=0x51)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000000c0)={<r10=>r7, 0x100, 0x5, 0x1, 0x2, 0x5, 0xa16b, 0x3, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0x2, 0x3f, 0x200, 0x100000, 0xfffff86f}}, &(0x7f0000000040)=0xb0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r10, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xffffffff, @local, 0x3}]}, &(0x7f0000000000)=0xc)

21:34:53 executing program 5:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5427, 0x0)
fcntl$setpipe(r0, 0x407, 0x6)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
close(r3)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000000100)={0x401, 0x8, &(0x7f0000000000)=[0x9, 0x6, 0x1, 0x9e, 0x1, 0xff, 0x401, 0xffe0], &(0x7f0000000040)=[0xbc, 0x2, 0x9, 0xae, 0x7, 0xfe00], &(0x7f00000000c0)=[0x9, 0x2, 0x0, 0x3, 0x4]})
dup2(r2, r4)
ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:53 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:34:53 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x4c4601)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x5d)

21:34:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:53 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:53 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
r2 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x141800, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, r2})
fsetxattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000040)='{@$-\x00', 0x5, 0x2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xc0403, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000fc0)={0x3, 0xa9a, &(0x7f0000000200)="4afa620f1f23406f5f038a0a2e996e0a4b75db5da3cc54d06ae9d73d", &(0x7f0000000240)="a9b95d4248bd5a30550cfb081d5053be244bc9bf12975391f3b92ad402b317b99bcc7a92b32a1741094547107b3db3aa8f86a93517d165b1f5c116d2340c786f8faa13f45ced5a42b3fcec77811e951e94b5d9f91c07509642afe7fc9602e16ca7c87b50ce2630ece4ba5d663eea11b84a", 0x1c, 0x71})
dup2(r5, r6)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000f40)=@nat={'nat\x00', 0x19, 0x4, 0xc58, [0x200002c0, 0x0, 0x0, 0x20000cf4, 0x20000d24], 0x0, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3160]}, 0xca8)
dup2(r3, r4)

21:34:54 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:34:54 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:54 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:34:54 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:54 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:54 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:54 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = gettid()
tkill(r1, 0x1004000000016)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000000)={0x4})
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:54 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:54 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:54 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:54 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:54 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:54 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:54 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:55 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:55 executing program 2:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1b5b07073100005d00000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000020000000000"], 0x78)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
write$eventfd(r1, &(0x7f0000000000)=0x8, 0x8)

21:34:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:55 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:57 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x1b, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:57 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0x0, 0x6, {0xf1}}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e001800028008000300030000000800010010000000040005800a00050004"], 0x54}}, 0x0)

21:34:57 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:57 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0xa980, 0x3, 0x6, 0x7, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x394, 0x100, 0x3ff, 0x8, r6})
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r7)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xc0}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x9ab)
read$usbfs(r7, &(0x7f0000000140)=""/210, 0xd2)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r8)
ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000100)={0x1, 0x9, 0x5, 0x2, 0x8, 0x6, 0x800, 0x101, 0x8})
getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, &(0x7f0000000000)=0xfffffffffffffffc)

[  867.578946][ T7937] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
21:34:57 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:57 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:57 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:57 executing program 2:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xe4)
prctl$PR_SET_PTRACER(0x59616d61, r0)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x1102900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y'])
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
ioctl$FICLONE(r2, 0x40049409, r3)
lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x0, 0x5}]}, 0x18, 0x0)
socket(0x10, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

21:34:57 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001240)={0x0, 0x0, 0x6, 0x6, 0x5}, 0xc)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000000)=0xa08)

21:34:57 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4a1503, 0x0)
dup2(r1, r2)
write$qrtrtun(r2, &(0x7f0000000080)="e103431b4562e7e479ad74e10aee15fb38cf1abb0951eebda40b7bcbae4815fdb00baaa3758137ac04326b375ce126b6a51a45321823076cb2dec9effee079fee3430ae884ed15a0a39c7e2db2bc5279c73949a0c35b0b08ad0b898d50252d636a9d04530af45c674e555a854429b9065c58c515495686126458a3b366c8f6f8bc9a5cb08eb859324fa85ffc5e5d4658875397b27d4e4f7a825f2ac18ab6fe9d76a49a8bbd3eb49750d6b22027adab3a5be98223a522fb825e3a598f44db386d5a8e5cd3caf329bc49052768", 0xcc)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r3 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x204800, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

21:34:57 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:58 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xb8b}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x17}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@ipv4={[], [], @local}, 0x21, r2})
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r4=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@v2={0x44c45e81798c507d, 0x2, 0x3, 0xffffff73, 0x20, "825bd714daab3fe0d1095f401d916d8cfb1e0ea3981ce24d3e7c0f7a4c08941f"}, 0x29, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @multicast2}}, 0x6, 0x8001}, &(0x7f0000000300)=0x88)
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x8, 0x2)

21:34:58 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:58 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x3, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, [], 0x1}, 0x101}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0xfffffeff}}]}, 0x10c)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000180)={@mcast2, 0xe, r5})

21:34:58 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:58 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:58 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:58 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c4001000000000085000000020000000000000000ffffffff00000f630c4003010400000000000000001d072b9b6d735b90035dd5b73403f84b89030009acffce273e0dcdf5ed24a39f71d3f79f32979e7f5cb5d6fd181ddc04e5442aac05d08e8ec3380cd3abdba0bc4b82c2a0d5c8e88983143ce2507501106d8486702ddc239480774d"], 0x0, 0x0, &(0x7f0000000040)})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000180)={{0x0, @addr=0x8000}, "658cf147c4de192d5a07ac81e2e866bd68af4547dca7f42f1ad8323679c5a3dc", 0x1})

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:58 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x2c}}, 0x0)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x64, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000050}, 0x4040085)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0)

21:34:58 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:58 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:58 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x20)

21:34:58 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000), 0x4)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
mq_getsetattr(r4, &(0x7f0000000040)={0x9, 0x744577bc, 0x80000001, 0x5}, &(0x7f00000000c0))

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:58 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:34:58 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:58 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0xa30000, 0x7, 0x4, <r1=>r0, 0x0, &(0x7f00000000c0)={0x9a0913, 0x8, [], @value64=0x2}})
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000001780), 0x80800)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000001a00), &(0x7f0000001900)=0x60)
dup2(r2, r3)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000200)={{0x2, 0x200, 0x8, 0x3, 0xb9f, 0x7f}, 0x2da, [0x2, 0x92a3, 0x1000, 0x9, 0x7, 0x8c, 0x4, 0x2, 0x9, 0x20, 0x3f, 0x2, 0x0, 0x1ff, 0x4f, 0x8, 0x625, 0xb7, 0x7, 0xbd4, 0x6, 0x1, 0x7, 0x1, 0x401, 0x8, 0xfffffff8, 0xffff, 0x7, 0x1, 0x3a1, 0x3ff, 0x5, 0x3153, 0x65f4, 0x8, 0x2, 0xcfd9, 0xff, 0x5, 0x6, 0x0, 0xffff0001, 0x100, 0x6, 0xfffffff8, 0x9, 0x1000, 0x4, 0x8, 0x6, 0x8, 0x2, 0x2, 0xfd8, 0x3, 0x1, 0xfffffc00, 0xcd4, 0x5, 0x1, 0x0, 0x1f, 0x8, 0xf3, 0x6, 0x100, 0x1, 0x4, 0x7, 0x3f, 0x6, 0x100, 0xfffffbff, 0x0, 0xefe, 0x80000000, 0x2, 0x8, 0x6, 0x8, 0x4, 0xe2d3, 0xdcd6, 0x10000, 0x200, 0x0, 0x4, 0x1000, 0x5, 0x1, 0xffffffff, 0x1f, 0x8000, 0x2, 0x4, 0x200, 0x6, 0x6, 0x54e8, 0xf77, 0x80000000, 0x1ff, 0x452, 0x8, 0x7fff, 0x4, 0x6, 0x5, 0x1, 0x9, 0x6, 0x890, 0xfffffffe, 0x10001, 0x100, 0x0, 0x2, 0x9e, 0x7ff, 0x40, 0x319, 0xfff, 0x1f, 0x401, 0x4, 0x9, 0x80000000, 0x10, 0x10000, 0x100, 0x7, 0x80, 0x7, 0x5, 0x2e, 0x2, 0x0, 0x3ff, 0xe5c9, 0xbc, 0x3, 0x5, 0x80000000, 0x4, 0x6, 0x401, 0x80000000, 0xfff, 0xfffffffa, 0x1, 0x100, 0x1b5, 0x1, 0x6, 0xfffffffb, 0x800, 0x40000000, 0x2, 0x8, 0xfa, 0x0, 0x5, 0x400, 0x0, 0xffffffc0, 0xb8c, 0x10000, 0x99d0, 0xc000000, 0x806b, 0x81b9, 0x7c, 0x7f, 0x80000000, 0xf9ad, 0xfd7, 0x5, 0x3, 0x3, 0x0, 0x7, 0x20, 0x3, 0x800, 0x7fff, 0x80000000, 0xffff, 0x7, 0x5, 0x0, 0xffff, 0x40, 0x40, 0x1ff, 0x6, 0x6, 0x3, 0x2, 0xa6f, 0x28, 0x66, 0x802, 0x0, 0xfa, 0x8, 0x4, 0x2, 0x0, 0x1000, 0xff, 0x6, 0x2, 0x4e, 0x2ee, 0x887, 0x3, 0x2d9e4e53, 0x4, 0x9, 0x1, 0x7, 0x9, 0xdb, 0x10000, 0x20, 0x7, 0x7, 0xf0, 0x17, 0x100, 0x0, 0x5, 0x6, 0xc0, 0x4, 0x2, 0x401, 0x7fffffff, 0x9, 0x7, 0x9, 0x9, 0x1, 0x1, 0x5, 0x0, 0x1ff, 0x401, 0x10000, 0x2, 0x9, 0x6, 0x7, 0x800, 0x80000000, 0x2, 0x1fdab222, 0x200, 0x800, 0x4470c27b, 0x10001, 0x4, 0x1000, 0x5, 0x8, 0xffffffff, 0x8, 0x3, 0x800, 0x8, 0x2, 0x401, 0x7f, 0x4, 0x9, 0x5, 0x2, 0x20, 0x20, 0x0, 0x2, 0xfa, 0x9, 0x9, 0x3ff, 0x5, 0x6, 0x10000, 0x1000, 0x3, 0xffffff7f, 0x1, 0x0, 0x31c, 0x0, 0x1, 0x2, 0x8, 0x20, 0xe624, 0xfffffffd, 0x5, 0x6, 0x7, 0xd46, 0x6, 0x6, 0x20, 0x4, 0x1, 0x2, 0x3, 0x100, 0x9, 0x7, 0x9, 0x3, 0xffffffff, 0x7c56d503, 0xff, 0x5, 0x7, 0x4, 0x7fffffff, 0x6, 0x5ff, 0x7, 0x8, 0x3ff, 0x7, 0x8001, 0xd5, 0x8, 0x10001, 0x3ff, 0x8, 0x289, 0x4, 0x2, 0x9, 0x8, 0x4, 0x4, 0xc08, 0xc92, 0xed4, 0x4, 0x7, 0x592, 0x4, 0x7, 0x2, 0x9, 0x9, 0x80, 0x5, 0x1dc, 0x2, 0x2, 0xd71, 0x4, 0x6, 0x48902819, 0x0, 0x6, 0x6, 0x7, 0x1000, 0x800, 0xcea, 0x2, 0x1a4, 0x3fe0, 0x400, 0x0, 0x1, 0x5f54, 0x3ea5, 0x80, 0x1000, 0x8001, 0xfffffffb, 0x9, 0x1, 0xf9, 0xd11, 0x1, 0x9, 0x80000000, 0x2, 0x6, 0x2, 0x2c4e77f, 0xffffff81, 0x5, 0x3, 0x591b10df, 0x0, 0x0, 0x6, 0x7, 0x9, 0x3, 0x1, 0x7f, 0x5, 0x52f, 0x101, 0x4f1, 0x1, 0x4d1b, 0x5, 0x3f, 0x3f, 0xcd, 0x5, 0x400, 0x3f, 0x3f, 0x7, 0x2, 0x4, 0xc3, 0x8, 0x5, 0x4, 0xff, 0x3, 0x1, 0x0, 0x7, 0x8, 0x89, 0x9, 0xa3a, 0x7, 0x7fff, 0x9, 0x1ff, 0x9, 0x800, 0x3, 0x8000, 0x80000001, 0x7fff, 0x7, 0x3, 0xfffffe00, 0x10001, 0x18, 0x0, 0x0, 0x8, 0xd39, 0x20, 0x3, 0x7, 0xc287, 0x80000001, 0x1, 0x10b3, 0xff, 0xfffffb3c, 0x1, 0x7, 0x8, 0x3, 0x4, 0x10001, 0x6, 0x80, 0x4, 0x7fffffff, 0x0, 0x2, 0x3f, 0x22f, 0x4, 0x2, 0x6, 0x544, 0xff, 0x4, 0x1, 0x4, 0x0, 0xf, 0x8, 0x0, 0x7, 0xe23, 0x0, 0xdf, 0x7f, 0x7, 0x9, 0x5, 0x2, 0x6, 0x101, 0x2, 0x5, 0x4, 0xb5ee, 0x0, 0x9, 0x2, 0x2, 0x34c2, 0x1e5, 0x7, 0x9, 0x1, 0x0, 0x4000, 0x2a, 0x6, 0x8e, 0x59d, 0x5, 0x3, 0x1ff, 0x8001, 0x65, 0x9, 0x7, 0xf335, 0x6, 0xba, 0xffffffff, 0x400, 0x2c6b, 0x1e, 0x6, 0x2, 0x85f, 0x3, 0x5, 0x9, 0x17, 0x2, 0x2, 0x80000000, 0x7fff, 0x9f1, 0x8, 0x9, 0xbc3e, 0xffffffff, 0x9f, 0x0, 0x7343, 0xcbc, 0x0, 0x3, 0x7f, 0x4, 0x1, 0x800, 0xfc, 0x5, 0x8001, 0x15, 0x5, 0x8, 0x0, 0xfffffffe, 0x0, 0x5, 0x983, 0x81f, 0x8, 0x0, 0x3, 0x6, 0x7, 0x7, 0xaa14, 0x1, 0x6, 0xda, 0x2, 0x1, 0x10001, 0xd871, 0x75, 0x3800, 0xff, 0xd03, 0x80, 0x3f, 0x1, 0x7e2, 0x2131, 0x9, 0x0, 0x2, 0x3f, 0x8, 0xaf60, 0xa6bb, 0xfffffe01, 0x7fffffff, 0xfff, 0xff, 0xdfce, 0x80000001, 0x5, 0x2, 0x8, 0x10001, 0x0, 0xffff8001, 0x0, 0x8001, 0x2, 0x50, 0x3, 0x4, 0x4, 0xce1, 0x9d, 0x7, 0x101, 0xffffff80, 0x7a, 0x10001, 0x1, 0x8, 0x2, 0x9, 0x42b0, 0x200, 0x3ff, 0x3f, 0x401, 0x200, 0xffff8000, 0x100, 0x2, 0xffffffff, 0x7, 0x48, 0x8, 0x4, 0x3, 0x6, 0x7, 0x7, 0x40, 0xffff8d49, 0x6, 0x6, 0x8, 0x4, 0x101, 0x200, 0x6, 0x81, 0x7fffffff, 0x9, 0xfffffffa, 0xfe7, 0x81, 0x7fffffff, 0x8, 0xfff, 0x9, 0x8, 0x400, 0x9, 0xe9, 0x20, 0x7fff, 0x9, 0x6, 0xffffffff, 0x7, 0x9, 0x8000, 0x1, 0x9, 0x200, 0x6, 0x3f, 0x9, 0xf61, 0x4, 0x7, 0x81, 0x1, 0x1b829b8c, 0x80000001, 0x9, 0x157, 0x1, 0xd1d, 0x71e, 0x75, 0x80000000, 0x0, 0x1, 0x129d, 0x6, 0x3f, 0x4a, 0x6, 0x8001, 0x7, 0x8000, 0x7ff, 0x13d, 0x2, 0x5, 0x80000001, 0x7, 0x80000000, 0xb36, 0x5, 0x7ff, 0xffff7fff, 0x0, 0xffffff80, 0x3, 0x44, 0x9, 0x6, 0x3, 0x9, 0x6, 0x1f, 0x101, 0x2, 0x5, 0xac7, 0x7, 0x7ff, 0x9, 0x8, 0x8, 0xcf, 0x6, 0xffffffff, 0x20, 0x3, 0x7, 0x101, 0x5, 0x5, 0x0, 0x41501481, 0x47, 0x1, 0x5, 0x5, 0x8, 0x2, 0x401, 0xfffffffc, 0x1, 0x9, 0x7, 0x0, 0x3ff, 0x7, 0x5, 0x7, 0x2, 0x800, 0x889, 0x5, 0x0, 0x7de22666, 0x3, 0xdba, 0x42, 0x0, 0x100, 0xffffff4b, 0x0, 0x9, 0x4, 0x400, 0x8001, 0x10000, 0xfffffc5f, 0x8001, 0x32f, 0x7, 0x7, 0x8000, 0xf3c4, 0x1, 0x3, 0x9, 0x4, 0x9, 0x8001, 0x8, 0x0, 0x1, 0x3974, 0x101, 0x4, 0x6, 0xfffffffb, 0x6, 0x1, 0x8001, 0x200, 0x2, 0x5, 0x1, 0x2, 0x4219, 0x80, 0x4, 0x7, 0x1ff, 0x3, 0xddd0, 0xff, 0x8, 0xec, 0x81, 0x7, 0x1, 0x3, 0x1, 0x2, 0xbd9, 0x5, 0x7, 0x400, 0x0, 0x3f, 0x9, 0x7, 0x3, 0x667, 0x17, 0x8, 0x6d7, 0x7, 0x80000001, 0x5, 0x879e, 0x80000001, 0x5, 0x6276, 0x100, 0x87, 0x1, 0x0, 0x800, 0xffff, 0x80000001, 0x3, 0xffffffff, 0x40, 0xfff, 0x4, 0x200, 0x401, 0xffffffff, 0x3f, 0x38c, 0x81, 0x6, 0x4, 0x4, 0x4, 0x7fff, 0xfffffff9, 0x81, 0x10000, 0x80000000, 0x3, 0x9, 0x8001, 0x1, 0x800, 0x5, 0x9aa800, 0x2, 0x80000001, 0x1, 0x7, 0x2, 0x7, 0x5, 0x78, 0xa9500000, 0x7e8, 0xff, 0x7ff, 0x10000, 0xb0e, 0x1, 0x82, 0x8, 0x1, 0x80, 0x20, 0x5, 0x4, 0x4, 0x8, 0x0, 0x9, 0x1f, 0x7, 0x7, 0x1, 0x5, 0x4fd3, 0x8000, 0x0, 0x6, 0x3, 0xfffffffa, 0x18eacf4d, 0x8000, 0x6, 0x1, 0x40, 0x9, 0x2, 0x4, 0x0, 0x7, 0x8, 0x2, 0x4, 0x20, 0x1f, 0x1b8, 0x5, 0x6e, 0x9, 0x0, 0x3, 0x40, 0x81, 0x17e2, 0x10001, 0x9, 0x9, 0x2, 0x7, 0xffffffff, 0x4, 0x4, 0x100, 0xffff, 0x1, 0x7, 0xffff, 0x0, 0x20, 0x0, 0x80000000, 0x4, 0x200, 0xff, 0x3ab6, 0x3ec, 0x7, 0x10001, 0x0, 0x0, 0x0, 0xff, 0x6c25, 0x4, 0x3ff, 0x0, 0x1, 0x6, 0x9, 0x1, 0x7fff, 0x7, 0x7, 0x1, 0x8, 0x10000, 0x40, 0x401, 0x7f, 0xff, 0xffc0000, 0x4, 0x2, 0x11, 0x6, 0x677, 0x8, 0x8000, 0xffffffff, 0x96f1, 0x8, 0x2, 0xffffffff, 0xffffffff, 0x6, 0x9, 0x6, 0x3, 0x1, 0xed, 0x7, 0x8, 0x4, 0x1, 0x8, 0x0, 0x59d38bcb, 0x2, 0x1, 0x9, 0x54, 0x8]})
r7 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100, 0x400)
sendmmsg$inet_sctp(r7, &(0x7f00000019c0)=[{&(0x7f0000001240)=@in6={0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000001280)="477ff71010cd53b245075386130c9102ee74f5007b9c018b39269f49e79ca57e7aea4c7596021d66e9c717b58afc645be758f5c1d2168e60e52b131bc43f768c23ad27ab3b34c7a7828b126140d56da8011a66cb12ea4ec005f2584d8786679b3d2f11d72f2f362f4b78062d0a2042c82dcebffc26410ebdf7453a991ca2dfcb35a42181da77947970f218d603990493cec372352b113e3b66fbb7277bf954d8252c2bfb6131bbff0246171914d7fd1f242b084ef478022e93f3915933d5bd4ef75594743193a33590f28e14dbc06b1c", 0xd0}, {&(0x7f0000001380)="b94f6f534e4b88115f5018243ac7f9482ca6172eaadffef9d0d57ceebf60d68b85f7bdce01945bbb595ae4", 0x2b}, {&(0x7f00000013c0)="b6c6ed3a9064f69e9b3ec7a3546ebbb5010f9c1efd3d9164302130ca64081c65f7117788f1ad07ea6604f8b37a91e16ace5d0e004d577bd23378440f474398d5082bf854fb17c7d50a5802bb149b75d308f630b51d0aec4cfc2ef2e468213903aee59b479c3b67b2aa6c9228919985d1c85972c8ec296dcd91ec242a9fc03d0535709948e32e956a54557f171fc65d284783b9a729d7ab2c7fff5504aa2d95966e7dba37e49f7b14e7bc1085750d2ff2e2f98b78da5009ec6ee2ad0ba5b8dcd416b02ab4d671189bbba7e8f2d9064f", 0xcf}, {&(0x7f00000014c0)="bec52c0be3150eb16ae8ea29339fd7a8b9d54d2568369be8d1bf60714e21329cbd1dd4b8c8a810cd6b9d6164ec3178265a43f76707725bfb9c88c6008d7aa8306f34e95def2ca1f29fefac5112013dcf", 0x50}, {&(0x7f0000001540)="291afcfa51681e8935c66af4f73fc92b55047264c91eeec3c87cb56c42d09c312579ba6b87cd6f332bfeb114bab7935486238a25f930055ee5e3f5cb1807fd08cf50f39f8241fe766b0fadf8af61374827748d52f4532fce0f136f1d3def74e5521335e44777218ffb", 0x69}, {&(0x7f00000015c0)="f742b0d74414c17d7019bf8eacea0b50f3beee6ed15a363ee03f2a71532faffd3a90a486a5a46e6c354496ed104a5f03ba28baae0a9c81f39cedce4d6ee6ab9413d76bc394695dd555c38bd1a43bf4fc4b2b3559a57bd62ee5b403ed7ef8f7120cd4cb13898c63edc364ca1438967b4d2dfeefd8d3bb0fbf2ae1439b80881839c71ad24626fbfb03b42f714515f7e30e1c6103d71eeee1bab5cd605ac86f9e2cf71e86f0b775a20e5aa28042c4fdc0b2209e57f7d534026c359f9adc82285341f13a8d6a33bad576c4e2b1d9a7fab57701f547f84b24bfc9ec9c8574199ae4056836043b9a348014d04ca60693d006bf703853e55012db924ba8", 0xfa}, {&(0x7f00000016c0)="79e2cd2b3e3ccc612546ad2856be6428d0b0c1f24c3dc89e191e19802b2e5b037ff20181a8dbf95a1e566431c4a84bab57de9498812ce0ed584fdaff5dd62f72e113b8768214e41cd72d6e18c78c8e8b731b1b2e5bba9958febeb3556de3522fcd8377b5f2550d04d1fad583ea5f3082156675cd44b86b8f9d7420fd48d9d7442b7974d8a5d840e2c029f26d3587fb77559fc9637cf0435ec1b7a2eca6087795efc133cde18e0ebb34fd92259eb8898e", 0xb0}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="ac58ee108bdf1903f191e52f5c703e7210c07d44cfd7d200fec9b4a1799b3531f571a515d1124ca8b26622a2e6e736dea5e777c5b169db49d6861ad7b41b05a02e55962fd27deed6dcccfdc5feff3963a8e9c376a5b0396b953d65e6249dc77062461b90ce7b988ae963dae5", 0x6c}], 0x9, 0x0, 0x0, 0x84}, {&(0x7f00000018c0)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001900)}], 0x1, &(0x7f0000001980)=[@authinfo={0x10, 0x84, 0x6, {0x1c00}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x2c}], 0x2, 0x84)
listen(r0, 0x1)
ioctl$int_out(r0, 0x5460, &(0x7f0000000000))
unlink(&(0x7f0000000080)='./file0\x00')
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x37)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xfffffff9, @ipv4={[], [], @local}, 0x7fff}]}, &(0x7f0000000180)=0xc)

21:34:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  868.793085][ T2476] usb 3-1: new high-speed USB device number 9 using dummy_hcd
21:34:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:34:59 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x402000, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x444100, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x4c0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x3ff}, 0x4)
dup2(r1, r2)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001200)={0x1000, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x600080, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockname$l2tp(r4, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000000c0)=r6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:34:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  869.072884][ T2476] usb 3-1: Using ep0 maxpacket: 8
[  869.194363][ T2476] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  869.210552][ T2476] usb 3-1: config 0 has no interface number 0
[  869.236573][ T2476] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  869.270042][ T2476] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  869.293440][ T2476] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  869.316407][ T2476] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  869.337075][ T2476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.365005][ T2476] usb 3-1: config 0 descriptor??
[  869.393734][ T8006] raw-gadget gadget: fail, usb_ep_enable returned -22
[  869.401020][ T8006] raw-gadget gadget: fail, usb_ep_enable returned -22
[  869.776921][   T12] usb 3-1: USB disconnect, device number 9
[  870.572815][   T12] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  870.822776][   T12] usb 3-1: Using ep0 maxpacket: 8
[  870.963052][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  870.971137][   T12] usb 3-1: config 0 has no interface number 0
[  870.978985][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  870.990853][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  871.001573][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  871.012306][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  871.022084][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.036648][   T12] usb 3-1: config 0 descriptor??
[  871.061239][ T8006] raw-gadget gadget: fail, usb_ep_enable returned -22
[  871.069379][ T8006] raw-gadget gadget: fail, usb_ep_enable returned -22
[  871.301832][   T12] usb 3-1: USB disconnect, device number 10
21:35:01 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
sysfs$3(0x3)
listen(r0, 0x100000000000012)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x48, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x29}, 0x2}, @in6={0xa, 0x4e24, 0xdd44, @ipv4={[], [], @private=0xa010102}, 0xd56}]}, &(0x7f0000000180)=0xc)

21:35:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:01 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:01 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:01 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x20)

21:35:01 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10400, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, r4, 0x0, 0xc, &(0x7f0000000040)='/dev/ashmem\x00', 0xffffffffffffffff}, 0x30)
r6 = openat$vcsu(0xffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x200000, 0x0)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r9, 0x5427, 0x0)
ioctl$KIOCSOUND(r9, 0x4b2f, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xc0, &(0x7f00000002c0)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x7, 0x4}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x7, 0x7e8c, 0x1}, &(0x7f0000000240)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x9}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r5, r6, 0x0, 0x10, &(0x7f0000000140)='/dev/sequencer2\x00', r10}, 0x30)
ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x7ff)
dup2(r1, r2)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x2, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:01 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$inet6_int(r2, 0x29, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)

21:35:01 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r2 = dup2(r0, r1)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0))
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:01 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:01 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "e86317b7c315a375", "779bc53a2b17b6a323e663fe69bbade21d03dc7e9639efba6a2d6e39ea9b58ab", "417cdfae", "ffc5c2d7757deb79"}, 0x38)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x19)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
socket$inet6_mptcp(0xa, 0x1, 0x106)

21:35:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:01 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$btrfs_control(0xffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x440000, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x2)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  871.823040][   T12] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  872.082808][   T12] usb 3-1: Using ep0 maxpacket: 8
[  872.212769][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  872.221261][   T12] usb 3-1: config 0 has no interface number 0
[  872.227879][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  872.238975][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  872.249029][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  872.258948][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  872.268187][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.277337][   T12] usb 3-1: config 0 descriptor??
[  872.294695][ T8124] raw-gadget gadget: fail, usb_ep_enable returned -22
[  872.302005][ T8124] raw-gadget gadget: fail, usb_ep_enable returned -22
21:35:02 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:02 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, &(0x7f0000000b00))

[  872.691534][ T2476] usb 3-1: USB disconnect, device number 11
21:35:03 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x20)

21:35:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:03 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:03 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5e2add46, 0x422000)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000040)=r3, 0x1)

21:35:03 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)

21:35:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:03 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))

21:35:03 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:03 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:03 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40000, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x1, 0xfffffffc, 0x8001, <r5=>r4}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r5, 0x8e0b, 0x30, 0x8, 0xfff}, &(0x7f0000000280)=0x18)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

[  873.582740][   T12] usb 3-1: new high-speed USB device number 12 using dummy_hcd
21:35:03 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0xc)

21:35:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  873.842620][   T12] usb 3-1: Using ep0 maxpacket: 8
[  874.002745][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  874.010854][   T12] usb 3-1: config 0 has no interface number 0
[  874.018901][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  874.030924][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  874.042229][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  874.052933][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  874.062075][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.076839][   T12] usb 3-1: config 0 descriptor??
[  874.093478][ T8219] raw-gadget gadget: fail, usb_ep_enable returned -22
[  874.111115][ T8219] raw-gadget gadget: fail, usb_ep_enable returned -22
[  874.473561][ T2476] usb 3-1: USB disconnect, device number 12
21:35:05 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:05 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x3)
r2 = gettid()
tkill(r2, 0x1004000000016)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0)
dup2(r3, r4)
ioctl$RTC_EPOCH_SET(r4, 0x4004700e, 0xfffffeff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r7)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f00000014c0)=<r8=>0x0, &(0x7f0000001500)=0x4)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001540)={@ipv4={[], [], @local}, 0x56, r8})
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000001440)=r2)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:05 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200028bd7000fcdbdf250200000008000100000000000c00030006000000000000000c000300feffffffffffffff0c000300bd040000000000000c0008003d000000000000000c000800020026f6000000000c00080000000080000000002d881ae0da4dbe1a6e24c2e2aef29c92c3038a53035c1c8a19cd9e444fee09542298515fc85c0900000003aab3bd8bb8c99035a041e5ec41fa53dcffa479317be7f056fac59a9b915f7e21b67f98da62c653f1dfcb33fbb228316e2cd7f3f55d0939dffac6e8950e7eb6635304dc2f82bba1c90b80d16b178d6b88cc5060c91912a50e5bb31c66100a073a2f3519aee8f5b19d4e8e30639e4e78749d06beb625c74263731e48fdb5f7de7296b0fd38159a68"], 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x10000)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000040)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r4, 0xffffffffffffffff)
r5 = openat$snapshot(0xffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x502, 0x0)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r8 = dup2(r6, r7)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48000280}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x30048940}, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r9 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r9, &(0x7f0000000000)={0x2a, 0xffffffff, 0x7fff}, 0xc)
sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x880)

21:35:05 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:05 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:05 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x20)

21:35:05 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:05 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:05 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x22080, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x9, 0x4)
r2 = openat$zero(0xffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101040, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)

21:35:05 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:05 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:05 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:05 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  875.402743][ T2476] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  875.652567][ T2476] usb 3-1: Using ep0 maxpacket: 8
[  875.772562][ T2476] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  875.780899][ T2476] usb 3-1: config 0 has no interface number 0
[  875.788992][ T2476] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  875.801030][ T2476] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  875.811770][ T2476] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  875.822381][ T2476] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  875.832113][ T2476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.841706][ T2476] usb 3-1: config 0 descriptor??
[  875.883263][ T8301] raw-gadget gadget: fail, usb_ep_enable returned -22
[  875.890542][ T8301] raw-gadget gadget: fail, usb_ep_enable returned -22
[  876.254626][ T3837] usb 3-1: USB disconnect, device number 13
[  876.744338][    T0] NOHZ: local_softirq_pending 08
21:35:08 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x709040, 0x0)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x3)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:08 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0xb203, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1dc, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6e0}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xadf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d7}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4008400}, 0x20008884)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000040)={0x80, 0x2, 0x10000, 0x5, &(0x7f0000000000)=[{0x5, 0x5, 0xd8, 0x9}, {0xffe0, 0x2, 0x6, 0xb6}, {0x3ff, 0x7fff, 0x4, 0x2}, {0x400, 0x9, 0x3, 0x7}, {0x5, 0x7f, 0x80, 0x3}]})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
socket$pppoe(0x18, 0x1, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140a, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804)

21:35:08 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:08 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:08 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)

21:35:08 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  878.078681][ T8370] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
21:35:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:08 executing program 5:
membarrier(0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

21:35:08 executing program 1:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5427, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r1=>0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x1, 0x0, 0x90, 0xb54f, r1})
r2 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r2, 0x0)
listen(r2, 0x100000000000012)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0xc79b2a4bbc91c467, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000000)=0xfffffffa)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:08 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))

21:35:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  878.412465][   T17] usb 3-1: new high-speed USB device number 14 using dummy_hcd
21:35:08 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5427, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040))
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r6, 0x5427, 0x0)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r7, 0x5427, 0x0)
r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r8, 0x5427, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc004240a, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES64=r3, @ANYRESOCT, @ANYRES16=r8, @ANYRES32=r5])

21:35:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  878.667819][   T17] usb 3-1: Using ep0 maxpacket: 8
[  878.792462][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  878.800513][   T17] usb 3-1: config 0 has no interface number 0
[  878.823212][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  878.842349][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  878.853345][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  878.864037][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  878.874347][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.884337][   T17] usb 3-1: config 0 descriptor??
[  878.903236][ T8371] raw-gadget gadget: fail, usb_ep_enable returned -22
[  878.910574][ T8371] raw-gadget gadget: fail, usb_ep_enable returned -22
21:35:09 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:09 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  879.159227][   T17] usb 3-1: USB disconnect, device number 14
21:35:09 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)

21:35:09 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040))
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r3)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r4)
sendmsg$alg(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="cb372345187cdd686ecfcc207bb90932787ebba7d4cbe1f3e3d271d55d1f18aeb9d5c5f1567784f4bf1e01d718ab9cf9e1e3f6501efe48b623c548d4337dab12257ded988e731589af356af1c29956d94e2fd173ce77b21612c7683981ec1c339cc4828e11aba4a470d57b1a98bfdb9bc07f0a28cb446bc841b6c2fae4243dc9dae55337ca5b5f5227038c19ea1a2b27a3d84f830427ab8d053912bbe3797f0854a5b09532792f72e6", 0xa9}, {&(0x7f0000000180)="7903539849efc45984c63aa3da12aeed36ed5e7e17fce9da3f89d17d55aa60ed1d42ea1e93a069d395e4b2962a51e3ffb768f23fb133ff1741db18f3281452db88d3b2a9de19252f48939d68", 0x4c}, {&(0x7f0000000200)="0c96efd5e3dcac68d3a3e88465a9fc2ee5e0b7cfe114add806e3783e0e08d3271ecd8005e60dcfa8b1e3a7b8dc21b7d294b226f309e40fd45edb136f45df2529dc8f628d6d64f289a614be33a3adaa003412a148094e5d52814a3ed715e6f5644e4cad5aa8f9a1677c3c3720dafea3572f21ca9ea34e37d663229e460337bce6afddd61b83a990498b155eefe08d376e48106a56c6db090f56eeb8bc727e850715019c7604138ecd1048ee043b252db118946e2ced4939b7b88f73d40f3de0a5ed335516551a40ad235e814bc34bc80c9bbf", 0xd2}, {&(0x7f0000000b40)="1031d5f921360b3cf38e8a32770d320a6cc291c8a60e7fbe87156eac1ed8ed9d4deb1b6b5ff70dbf961f8deacf853435692cd9d2d8e471adc53711a4909660743b533788caaab1377f39e7f398b8b28578804c8bca1aa6cad26f7ce4718bb9376c5920a718c09e1b55e3b5755d161b294135ba3e737698179bc67a938e4932a88f126d45e75651d6ba18de7e4abb4b144071a26bfe28a645e5b216df0856e0d226b5483b481e2b04ad7078b54f3978577914282ddaa69205213993fe5b7acffc679fe168895e1512a5d50ba1c6bb7c7c43c8a19dca03416ba8e877c9af5875c434e5029c87fb0417028e673204b0a2c8b2cbc7c963341744e5b9fb3dac0ef1d6d425687867ca4a8c7a0dc2f0bffd03474b64689f558189333f80a8754da335d6e3bc4695ef519b84f89ad151259de04142fe804ee48f69f46fe26c06ed231e7d252d855d9812884bbf73254891ee157771252e77129b2807e1df27043583d74525e153e2707db0d01bb56e334d63ca6b6a6b71628231b3c72fa7bf3e4910c0fa43666502d211de0b496ed21183642c0f54f8e6102e6bbcfbd3e9febe361a9c5fc2197886e33c37ae180dd0e4600d3ceea2ce662ce300fa4dbb7f052adb42425c674d7304404aec722b4b152260e8e734eff045f527bd01c3bda60a1d430fc5cad9964aecdca11928610c37c37709006f659c623fd4a8d503ba59bd88fda353f1ff882fea67a9374f01cb69d914c8919a671eb07dd756abd7c3e856d35b15c3df505abb565811f408b94695a911c3a74865b1cc8f84f48cc0b2aab265c0518a2a7afab610c1b99ea7d415d09f5c037838bdd250e4dfe4d5d313cb0ee481fe5526a8461e4fae1dd71b956b129e12688d4308b7aafaf0f03b38e68a628d0c3a00185686d7d15990f149e7bd918ec37d4529261c383de743bea3435a1262a8e3d867628c80b0bbdfa23b34badc9676e89f15e00ea542a08a06091d94f1426f1a44a948c2767fec811c4f3070f56241f66c8492228ce67ad9628739a6dea46b939177465c362d4c7994bcdc9b2454d98e23053c7b01481582e6feda77ec3f1958dc2624aed8aa5dffac8273330f0cc275facd0628b60a90faae598894c9c453e4c5f93948873adbed6951adcf8a1c8fd89106a8f2f8855a9a7c9cf0301044028787dc2e674d548a890b8f4f19ddb715631a3df642c41944d9fe8360d0537cad4dda4d5d264bb7af297050e1d6bccee18546a18a11e673d13751169b3de15f41483e70ff4f4c9a4b8c7434d2b8dc872aec7b4317d7d4bc60c384602c53c47fb2e1fb6a56ac7ad14f6f8e7d1768a2a451bd5b4a8c9104924be3e7841a5cbf11194d2dc5f633f115bf515b22bf8cc83fa53a85af15b924f9b09f494bf6efae3f7302f0afeaf8245ef759e4abf50bb7620998a2e66f2d6d6598087467a5da595b6f75eee51eb402e5844c31ff0bab5b4c4c56467ef48bdabbaa574c6702785eea4f05d1621b792cf7547c6ddaa49eb72aac3a18b4ea7f3eaef8ddb026f7b7ecce2b54a36b9df2ded52673c2dda928f3874e02f6ed7890a721fc608cc6e90ca1da5a69541ac6252c2cc37b29ff4fc9a967453fe7416b0ea4230e5b01343938a917e4a46497fc45683e84c5400a5d31e7f222e991a321ccded18ed84d26de851d9cd9b517f63ecde79675ff6a5975fcf220822a1ab93da79159b52543a149264d24a3a7e40491abe0b2b023fe7cef2cfad279a690367ca02de105fb8941ac2119d479a553db35ec8b7e89a1e93009887e72bdb82b17cc23350ca1b6fc2705076e5f45e2ff0572f0dd28453b43a8228170d0430e8acef4c3f7a26f8b564f94fdedcb6691ff8f416a0ac73cc6a77dd7f8db9fe0bb896484a75fa7d0b604a680834223bd3eb15f1121ac8a278c9a8dc21c0cc55c4f59dfe79f3af3570d729c5595670ddf2a281a9c503a0421a8e200f9f819634f55375a427c30bd2672d4b194198dfc4b0a38218af349801077adaf03c45438f076ab0c89f5cac3d80162313a6e76e97aaac6bf0a6f20695a9a689c40bb3d33fff4f20d3802e72b707483cb29c879a06d5d7778df885e41832676257705f52ea9e9486e15781fb2ea023a9abad18c3c1ab8179085c93a796d7a2f5cfa89a944c1f5e96bb309a9eb420d021683cd073054b82382c447f4857b2f341490a8acc01da02c8c967683280c2cc05e04e293891d71d48102e5d9b7f3caad15dc5c3c9206eb4014486563bb6686129e6d86374ea1d16a735ca9055700b462f9b237e54cbc6024218c7f8645929bf43f671c777b3b4b357894e985bf40890c7e48b0e2b36326a91da6770be55c6e10e57957e2686821b752d36f738439944c794f4c433a3763bf23a0c8a1415ec19ea467f092808c93e149fe67caf1379bdf0b592ef5c4eb70983e4fb2901dc9e76051a9e196989d540eb833652eaaa79973d295d330bedf549ee38684ab6d9c855bb05d201dd9d30e8045b47eb7a3772a0c97cba1c4ae26ac5b395c639ac952bba10ee2182683fad8eb27399aa01feaac66781276ed8a5b6e71612955a1a9abbfd07d3addcc4f6701a4be387729344c0aa8af8bffb50d30aea7502230c7dfb37d0c5a37f631b6385ac77501d3e4ed5c50b61b26ebf8f407cde9379792b5a70efddc670120972b2ebc66961169a7cb81d64417c1d7ecbb8ac61a2a3c8c8cf54a96d8a07b357c484463b5ea88b03e48ac04ebe8dd55f7c324f1863bfa3316433b3e3accfc926f0179e8c3d0444d52c9cef84e61c173b6efcfe673c8e8395b21fea93834a0c03bd5ef148b348f8ab6b1c5ace85a49c344e5eed4ae51356322551d7c4a08eb23cf7bc9187528d6d004bce549345f74b1590d4f7f1b0a3a7f428fa5d95b4705418b3e59ec6b66a87dccf563ba57e1c91f4b2577ede5242a20c610936d7890418b165ae7d2e751ea889724cf22e448832f0c7639b070ba365729133686a56381173cd0c5473f2c1a5daa3559e2d906e3e13af2ab22c57a7faabf26fa5f663ae82e1c4dad2b50ad7e8b1831d642116c10aee0b4cb5b48fc0d9592b3f7413549fa5561092c5f471d1015447fc0f8acb4fdb8c882348577fe50ec6ba5cebfa2586e15a499958e65e2e4ff8b17f89d37ec04e2de2b629d0a5050ca93e565c337b57d39eff13a055e07b26df89bab0b2780e582749ffb983231ab9a6f131fd59162b12c2cad07a52782c0a8e85ce969f599542f5d07df883b16f17811627d84ee9b4f0632e6a031c819720470792b84e5b475fb0676aff12bbb18389a95ddc40c00c35fb7e97a86a6188a59cb6da907400d63714af6af86b66ed596f633aa2ad24269a109e085baf52439edfaa13d421d710545c6637c21809c8fb426fcf0fbf0bb1e096435cb9749fe1520c9aad361d779b1d6b877bc1f8c7a031f34c3f0a7c04b49ddfd48b67019807436c9debea0f1c049af6291b8d3af6a4dd8f4f7fdcc52e4ab2f6e00dcfbfa78d234d9c8f585dac944670aab677ec6fc749aa79914d405390d9c0d0ce7c8341cbaf79615bcaadaf98d69f47ab7552f9a943e63433283aca3b561cbb902b182bbe2e9e31c170bbd6fb7a9ef509f8de121b6d7eb239a2436f22cc430d6efa3597f644342e05acce5af0f05f501cd13f9b153cd266f2363b98575b0d0f68b3a25ba45cfea6041c61e55c30845a6be29d7db7cacafe8eaf30f2b3033ed140e25ae8d3eda52db7dde8946f4c2ae585fa0c42fa47b7da07b998923b290831f4fe78729195caa8ab748ddbadb6a2fdc22b1bc741fdb305c184bf11805c7309f4aa37177029a4403e6d5ef447b555437f8262b50d79d4aff65640372d7857f28d9f7ffcac8f80d4ed9d7d336c5e5211a23a1767a22925ad4285cc0c3f761b4b7d7b72c45888dcb7ddc254016e7ed50d96730c441b14cab8e57f1f3d44eee7320d9ff723fb0d8be233bde38a95b7ee3003e79afd2a84e8eb2dbba632c845b4284de0570c62141efe3c1d2113bd40af09274faf3a94af829a8a3928162e8fef630062b1bac1f4b68d17a4ae39f08e950cc8fbe6cd155b5e20936d328cf82efb54d4be5ab988464089952e08d645a8e3acd9d493ca006503cd05f6b7ad84c26a94f8928ba363314f5a825604dff1fb90633107ba3a062b4f1884ec348a01a9354aa63c9c946ceea49d9645859558a4fbee0250011460df9ceee2eb81759e58435d9f1ed4a653dd23f884282d508b89de8fb4a5a948e7eeef5fe4aca92f2402a1bedb16c9f8b9aec3c2e35ffd57199afd870d664313064bc51bc259d718af3e536064a81b138787a2b6a2e48b13c83b1802cf38969c017a4cfbbf08ec2e3d8ca7fc0fc39f2810782178438b583a8948e07aa02a502e560c8db03b8c70b1ed7e117d85aa816ada1e00de5527e8b0fccdd79ae8636c6b0ea828e9b5526ee9900d4a2527d12794fba38d1fa15f442df79713f54da2d0762706f88a3bd88d2b9298b652a70f7c9a0e44830979c441b89de4227766383da0d035a84180cdee6c3b0efb0926e3635e86f4c15334e6c190ca8603912d33ba446f37dd333cd74848a887763cc05d48e4f2160d44bcdb7ff0b1b94dd9579b51cefe1bb73bb21cca688993cbd38e3d183adea2979ac4627856e5d70063e9e6ee1be67cb4954792718da39ca4f221447db34cba9c0379115e1ede0471c2e2d75d189d6c27a90ce32bb89c203da5924f25332b825f3a992c4c588c9fae4a26172b4151362563fe0f8797a094945de612fea8a722b46b829f9ddf30c28bb7e091feac7fa4d6e64d74652dafd3ffd52adf8757788a8a6ca798ed04917e4d4e0cc2ce5219d49ebacb47821c73bbbf51e5a4af329a35f534a75cec3a6c3191ed92463a014990df1d4291ea70488d5732ea27f2ff9596c2bff63ef7defac00bb3f50da078a9d52564c07763c9bfc5ead85f87fd328aafc1625135ad8df19c3450116417494a05e3034b747904c31c5e367be33ec5004d664981c6fcbc5419f6fceb38671e562dcb1c8708fc8a001b11a6a0768b5afa9b0a4adadd37ca32af7aa7423258ee82d9997eff0a96ec67116210d1c78da0f5c164abd13a33b7326abff24b3b881d220ae243d7425b605b2e5e7960f01fe4e0150908c3fb66a1329e2b91c42935f4f47c3e86c559a83d1d8422f05ffba58624226b89dad8882d68b7e6bf0db17b98d1c586396583c71a91497a4d019beaeeca3b4cd23623721b5554266f8c45c3053f27f630c1181ec9b88daf179813b1042f4a6f34352b52d73e10183f964692f1a7ce807802651897ec44e523951ca29c2c36e4c6b414a56b50d3bb388b200e14498339fd3aee613016a7eedb5f8e0e258ddd0f5cc78d2d06f8e593b47ea9841f0aa88ee707703327bb5f232dd04e96fe1327810ff348a9b70003ac4eea5acaea82c7ce47221315d051b8ec4b049b275b04802e565a7efb58a5b4fac9bc33867bbcacfd26c89ba2bd4afe4e4e2f537666cfb9a5a6a64f9931476b9238504f0c0651a4ba50ab35890a4dd7805ce641dc72af808fa798136886418f5705c7bd1442e25bdb786d0681145da65d78fe32f4972b30f01f65a1dc43ba3f8390642cdd3c24efaf3ae1cdbb22afe9b21c728aee6a27f38378c05ee74f8c34459fa986c030b90630bca89a58f2ab2de5331f2dae0b8c222b2810ef69ba163982f1e6536ecc70cae1a01e462119171025a0dd3a52985a4ec7d15a2728dd71b8958121999f47b66cea51fea20d658440187ddc71a929a5dd6875260f4f3de7b713183b80c730c3388c41876712697cfadbfbc6d78d559", 0x1000}, {&(0x7f0000000300)="f8ccfa1076c8608fdbf2bd46150e78369cac383be64f3fb66aceb0896b922e67eedb55806d741eb29869671cc848ad62cbf92c9994c591232aedbaa06a15bff852dd30fbbb9c88ed28f3f306f5c490f7ea23f0fdf97a3a028cd455e0a045707bca2a0bdc38f0d9898b4764016a20d74c761b112377218b8e4808411cd512de86336487eedc0cb8b8635a87fd2e6567a58c2789bf4d3bf24959b5f0ce46314801b853", 0xa2}, {&(0x7f00000003c0)="a81ece2f48ab68fc1126b90bbe809faf38086849dd14228f7bd9", 0x1a}, {&(0x7f0000000400)="051767d4d7fb1e6903f91b0507f88e968e0d16b20d02da4d29dbe9225911f7d41793b859c8fbec46f7340f826556aea4e973b72dceaa824d", 0x38}, {&(0x7f0000000440)="7b80f40562cc2633d3823671bc4fbd6d8c451650dee0fc7bf5b61587bbd41624e60345af6f7ca7ca408a86a10310a034f3819fdef20d", 0x36}, {&(0x7f0000000480)="a6fcb781d8494f4059ad9755959d9acf897fc8d79c63cde7fa311a843b361749603936db68a34ef8a9f59ed9d87b584926d5c6c53b11aa7017dc058556e08c1cd4bb7fc2add0fd057b42b170af25993044119339c9a63720b7e83a8bf52bcc55", 0x60}, {&(0x7f0000000500)}], 0xa, 0x0, 0x0, 0x40}, 0x4004095)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, 0xffffffffffffffff)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r6, 0x40045730, &(0x7f0000000000)=0xffffad89)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r7, r8)
getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000540)={@private1, <r9=>0x0}, &(0x7f0000000580)=0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000005c0)={@mcast1, r9}, 0x14)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:09 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:09 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:09 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:10 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0x0, 0x98c, 0xd1f, 0x0, 0x9, 0x8})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r3)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000000)=0xc492)

21:35:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:10 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10)
listen(r0, 0x100000000000012)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
dup2(r4, r2)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f0000000140)='./file0\x00', r6}, 0x10)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000000)={0x7, <r7=>0x0, 0x1})
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40106435, &(0x7f0000000040)={0x401, r7, 0x10001, 0x5})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:10 executing program 5:
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x4, 0xffff, 0x200, 0x46a3, 0xfffffff8, 0x1000, 0x7fff, 0x2}, &(0x7f0000000040)=0x20)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xac5c0, 0x0)
dup2(r1, r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x2, 0x590, 0x57, 0x5, <r3=>0x0})
r4 = openat$vcsu(0xffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x800, 0x0)
socket$inet(0x2, 0x80001, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r6, 0xfffffffd}, &(0x7f0000000280)=0x8)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc0fc4110, &(0x7f0000000340)={0x8, [0xfffffff8, 0x0, 0x7], [{0x5, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x53, 0x62, 0x0, 0x1, 0x1, 0x1}, {0x1ff, 0x9, 0x0, 0x1, 0x1}, {0x800, 0x8000, 0x0, 0x1}, {0x1ff, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x8}, {0x7, 0x483801a6, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}]})
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r6, 0x3f}, 0x8)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r3})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2040, 0x124)
ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000140)={0x49, 0x3, 0x655})
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  880.162393][ T3837] usb 3-1: new high-speed USB device number 15 using dummy_hcd
21:35:10 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x5, 0x7, 0x4}, {0x9, 0x9, 0x14, 0xe2d6}, {0x9a16, 0x1, 0x1, 0x4}]}, 0x8)

[  880.432291][ T3837] usb 3-1: Using ep0 maxpacket: 8
[  880.552362][ T3837] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  880.576155][ T3837] usb 3-1: config 0 has no interface number 0
[  880.585378][ T3837] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  880.597712][ T3837] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  880.608873][ T3837] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  880.619021][ T3837] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  880.628472][ T3837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.641983][ T3837] usb 3-1: config 0 descriptor??
[  880.663026][ T8452] raw-gadget gadget: fail, usb_ep_enable returned -22
[  880.670323][ T8452] raw-gadget gadget: fail, usb_ep_enable returned -22
[  881.087670][ T3837] usb 3-1: USB disconnect, device number 15
21:35:11 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
prctl$PR_SVE_GET_VL(0x33, 0xa633)

21:35:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:11 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:11 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}]}, &(0x7f0000000180)=0xc)

21:35:11 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:35:11 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:11 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
shutdown(r4, 0x1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
listen(r0, 0x80012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0xc)

21:35:11 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f0000000000)={{0x3, 0x5}, 'port0\x00', 0xed, 0x410, 0xc112, 0xb62a758, 0x5, 0x0, 0x2, 0x0, 0x2, 0x7})

21:35:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:11 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:35:12 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:12 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
sync()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = dup2(r1, r2)
ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000000)={0xffffffff, 0xfe000000, 0x10, 0x2, 0x4, 0xd8bc})
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="09000005000000000000000002000800050065e167b441face7598fd4f0faa3532ae9b02040049af2e2d2c2b03a1e49df0c5ffb6cab49dc0b9a793d83724d9da84c2117301124e3465dec7f702ff6c9e92535cdccd41b4fc9cad30f97f32e0a735a6c9a05d92556bec2f18dc960371f410fbf09ad56edb1d854eee0e529045f243d46f2e3abd422118947bc0e16de84fae985ae75686651d8443af6d90a55611b02adac4ed2ed58b9c"], 0x16)
r4 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r4)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x1001, r5)
r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r5)
keyctl$update(0x2, r6, &(0x7f0000000240)="af0434cc5706571fa0faefb85360752ed0d703dd8e9c076f9fb9fffd38322c0eb0a7ecfed5d19272e0b1a0327255e69029294755fa2de917af24bc9201b1405b37f1ca8f4548a4cac6f695d72705fe41fd446e5b7ecd21355e5ed7a82916e9bbe2dc7abeccd673f749dd90fca762d9ea6b71483a4c42c57cb80b313beb60bb34303371baf72ab74cedaca288803496880c42e26e7fbbd235995e01e77ffff4343c6814202684944f484724c3f71c98a282ed2b9304ac1498ddda31bb7c1bdc7725cab7f65b50568f40adfdf516811e49068f12acd062f12acb7b4d184fe469ae4acf7b09f0d2dc09e96315e35d689d14e6fbdb7486", 0xf5)

[  882.032186][   T12] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  882.282122][   T12] usb 3-1: Using ep0 maxpacket: 8
[  882.402813][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  882.410904][   T12] usb 3-1: config 0 has no interface number 0
[  882.418790][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  882.430855][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  882.441700][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  882.452529][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  882.461635][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.475483][   T12] usb 3-1: config 0 descriptor??
[  882.492957][ T8537] raw-gadget gadget: fail, usb_ep_enable returned -22
[  882.500218][ T8537] raw-gadget gadget: fail, usb_ep_enable returned -22
[  882.929222][   T17] usb 3-1: USB disconnect, device number 16
21:35:13 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:13 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}}, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8, 0x1, 'drr\x00'}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44005}, 0x801)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:13 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:35:13 executing program 3:
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:13 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0xfffe, @remote}]}, &(0x7f0000000180)=0xc)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = socket$inet(0x2, 0x5, 0x17e)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x7, 0x4, 0x100, 0x20, 0x84, 0x7fff, 0x7}, 0x9c)

21:35:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:13 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat(0xffffffffffffffff, &(0x7f0000008d00)='./file0\x00', 0x80000, 0x93)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000008d40)={@in6={{0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xff}}, 0x0, 0x0, 0x4e, 0x0, "50846450b34262a2286c13080c27325a78dfc8f9ca4abcecd5c5c36ec1a51a374d2502c0602b153752dd1ed85df481386abe6ec8afeae08af77e3b685cdc57c2fc86fe05d2b2a7d146f1d637a39712b5"}, 0xd8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:13 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:13 executing program 3:
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:13 executing program 3:
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  883.852293][   T35] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  884.092033][   T35] usb 3-1: Using ep0 maxpacket: 8
[  884.232103][   T35] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  884.240139][   T35] usb 3-1: config 0 has no interface number 0
[  884.248099][   T35] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  884.259809][   T35] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  884.270395][   T35] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  884.280872][   T35] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  884.290496][   T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.305043][   T35] usb 3-1: config 0 descriptor??
[  884.322534][ T8618] raw-gadget gadget: fail, usb_ep_enable returned -22
[  884.329680][ T8618] raw-gadget gadget: fail, usb_ep_enable returned -22
[  884.615722][   T17] usb 3-1: USB disconnect, device number 17
21:35:15 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x7}, 0x8)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:15 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x434001, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000a, 0x810, r1, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1411, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040844}, 0x4890)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0xf8f0, 0x5, 0x40, 0x6}, {0x1, 0x2, 0x0, 0x20}, {0x8, 0x0, 0x7f, 0x4}, {0x1, 0x1, 0x0, 0x7}, {0x6, 0xb1, 0x92, 0x2}, {0x0, 0xec, 0x9, 0x8000}, {0xfe01, 0x5, 0x8, 0xf1}]})

21:35:15 executing program 3:
syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:15 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:35:15 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:15 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
getsockopt$sock_buf(r1, 0x1, 0xedaf61bab2163d65, 0x0, &(0x7f0000000140))
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x20002804)

21:35:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:15 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = socket$inet6(0xa, 0x5, 0xffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x7c, @private1={0xfc, 0x1, [], 0x1}, 0x7}]}, &(0x7f0000000180)=0xc)

21:35:15 executing program 3:
syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:15 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
prctl$PR_SET_ENDIAN(0x14, 0x1)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = socket$inet(0x2, 0x80001, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={r7, 0x3}, &(0x7f0000000180)=0x8)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f0000000b40)=""/4096)
dup2(r1, r2)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0485510, &(0x7f0000000080)={0x5, 0x2, 0x1f, 0xfffffffe, &(0x7f0000000000)=[{}, {}]})
r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r8, r9)
mkdirat$cgroup(r9, &(0x7f00000001c0)='syz0\x00', 0x1ff)

21:35:15 executing program 3:
syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:15 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
r3 = fcntl$dupfd(r1, 0x406, r2)
r4 = socket$inet(0x2, 0x80001, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={<r7=>r6, 0xc4f}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r7, 0xa, 0xc77}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:15 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  885.632157][   T17] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  885.881935][   T17] usb 3-1: Using ep0 maxpacket: 8
[  886.001991][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  886.010081][   T17] usb 3-1: config 0 has no interface number 0
[  886.017585][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  886.029251][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  886.039803][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  886.050185][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  886.059903][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.069121][   T17] usb 3-1: config 0 descriptor??
[  886.092546][ T8692] raw-gadget gadget: fail, usb_ep_enable returned -22
[  886.099806][ T8692] raw-gadget gadget: fail, usb_ep_enable returned -22
[  886.326627][   T17] usb 3-1: USB disconnect, device number 18
21:35:17 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:35:17 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5427, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/232)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="0021dbdc79948d3fd2cc7ea319bdbb1ca45abc0ffbd738a61145a7bf7d5af87ee5aa9943e89416380ba707d4cc32e15a0ef450d582bc01d8a0b26b", 0x3b, 0x0)
r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r4)
add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x1001, r5)
request_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)='/dev/ashmem\x00', r5)
r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r6)
r8 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x1001, r7)
keyctl$revoke(0x3, r8)
keyctl$dh_compute(0x17, &(0x7f00000002c0)={r3, 0x0, r8}, &(0x7f0000000600)=""/240, 0xf0, 0x0)
dup2(r0, r2)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
getsockopt$sock_buf(r9, 0x1, 0x3b, 0x0, &(0x7f0000000b00))

21:35:17 executing program 1:
r0 = socket$inet6(0xa, 0x4, 0x3)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:17 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:17 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:17 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:17 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:17 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000002", @ANYRES16=r3, @ANYBLOB="0c0025bd7000fcdbdf250100000014000300ff0200000000000000000000000000012f00070073797374656d5f753a6f626a6563745f723a73657472616e735f696e697472635f657865635f743a73300000"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240))
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
r5 = dup2(r4, r1)
ioctl$TIOCSIG(r5, 0x40045436, 0x25)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  887.361858][   T12] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  887.601838][   T12] usb 3-1: Using ep0 maxpacket: 8
[  887.722150][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  887.730193][   T12] usb 3-1: config 0 has no interface number 0
[  887.744285][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  887.759428][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  887.776813][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  887.806940][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  887.831068][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.868616][   T12] usb 3-1: config 0 descriptor??
[  887.907673][ T8773] raw-gadget gadget: fail, usb_ep_enable returned -22
[  887.926723][ T8773] raw-gadget gadget: fail, usb_ep_enable returned -22
[  888.175059][   T12] usb 3-1: USB disconnect, device number 19
21:35:18 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:35:18 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x24, 0x3, 0x0, {0x2, 0x3, 0x0, '&]#'}}, 0x24)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, [], [{0xfff, 0x400, 0x3, 0x2, 0x3, 0x800}, {0x80000001, 0x4, 0x80, 0x7, 0x100, 0x1}], [[], [], [], [], []]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:18 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:18 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:18 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c000020044da637f0b5b3349c33e8e0ff00b07522ba14", @ANYRES16=r4, @ANYBLOB="200028bd7000ffdbdf250400000008000400ffffffff14000500fe80000000000000000000000000001506000b001e000000080004000200000014000600000000000000000000000000000000011400050000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004880}, 0x24000810)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x1c}}, 0x40)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r5)
connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4)

21:35:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:19 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0xc)

21:35:19 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x80000001}, &(0x7f0000000100)=0x8)
dup2(r1, r2)
r6 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$VT_SETMODE(r6, 0x5602, &(0x7f0000000040)={0x9, 0x8, 0xfffb, 0x1d, 0x9ae6})
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:19 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54)
listen(r0, 0x100000000000012)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="cc0004076e027adfb6ab0000ffffff7f5d010000ad07000000000000000000007ce880e171d510375da02cd2b3f42e5b028270fefc2bc7e5d92d61200d21f21d24a51a0d03f0a5eb2b73ef85309a7739ba3c04036cfcffceef380614992ffcf6f70a26d7c5f821286dc42cbd9c3140dfe738fed3abd1b7debd1d4b4ccce484df2500"/385], 0x181)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000400)=0xc)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
splice(r2, &(0x7f0000000040)=0x7, r2, &(0x7f0000000200)=0x7ff, 0x80, 0x4)
dup2(r4, r7)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4)

21:35:19 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
r4 = socket$inet(0x2, 0x80001, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000)={<r7=>r6, 0xea, "0348a4e130617546ad589ab97f616ab9c6883cd8bf5511d1752afdd9b19ed1c26f4d730fb4de726371a6162e0d365df57dc0adf360c684d7d94b0c5ad1de33c36662b4ff7a6e536f0a6915cc99bbbb56fbe12b005464739890cc7ace6875369ee19a6e048349298a4ecd912cc4c5ac180c05243cd7653ccfdb95a7d1d24861b83dbd25550dbb0cdce072dcb927340767a82517147f34d8b616b56bbc08223a416d044e0de30c5397360d85d2edef1b0cf665e2aef2512462d30002919538d852995c9a4c3f18096484d160c07fa1352c84bf3df759f886b709e50e8c268238d3a308bf11dbad58032626"}, &(0x7f0000000100)=0xf2)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r7, 0x4, 0xffffffff, 0x363}, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

[  889.191942][   T35] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  889.441780][   T35] usb 3-1: Using ep0 maxpacket: 8
[  889.561877][   T35] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  889.572187][   T35] usb 3-1: config 0 has no interface number 0
[  889.578462][   T35] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  889.589638][   T35] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  889.599653][   T35] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  889.609503][   T35] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  889.618626][   T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.628202][   T35] usb 3-1: config 0 descriptor??
[  889.652324][ T8842] raw-gadget gadget: fail, usb_ep_enable returned -22
[  889.659413][ T8842] raw-gadget gadget: fail, usb_ep_enable returned -22
[  889.903374][ T3837] usb 3-1: USB disconnect, device number 20
21:35:20 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

21:35:20 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000000))
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:20 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}, 0x56}, 0xa)

21:35:20 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:20 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:20 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
r2 = socket$inet(0x2, 0x80001, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xffc1, 0x202, 0x8, 0x40, r4}, 0x10)

21:35:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:20 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)

21:35:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:20 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000)=0x1ff)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))

21:35:20 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r2, 0x0, 0x11323, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5}, 0x18)
sendmsg$can_j1939(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000000)={0x0}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

[  890.751938][   T17] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  890.991749][   T17] usb 3-1: Using ep0 maxpacket: 8
[  891.111924][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  891.119947][   T17] usb 3-1: config 0 has no interface number 0
[  891.131806][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  891.150532][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  891.166140][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  891.176788][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  891.190802][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.203302][   T17] usb 3-1: config 0 descriptor??
[  891.222664][ T8912] raw-gadget gadget: fail, usb_ep_enable returned -22
[  891.230020][ T8912] raw-gadget gadget: fail, usb_ep_enable returned -22
[  891.455208][   T17] usb 3-1: USB disconnect, device number 21
21:35:22 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

21:35:22 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:22 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @ipx={0x4, 0x19d, 0x8, "2dea2efc13cc", 0x7}, @qipcrtr={0x2a, 0xffffffff, 0x4000}, @sco, 0x101, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='macsec0\x00', 0x4, 0x4})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:22 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000b00))
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x5000, 0x6000, 0x7f, 0x0, 0x81})

21:35:22 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:22 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:22 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:22 executing program 5:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)
socket$alg(0x26, 0x5, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000000))

21:35:22 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:22 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x9b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x32, 0x31, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78)

21:35:22 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:22 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)

[  892.503628][   T12] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  892.761559][   T12] usb 3-1: Using ep0 maxpacket: 8
[  892.881823][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  892.892180][   T12] usb 3-1: config 0 has no interface number 0
[  892.906371][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  892.928797][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  892.951550][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  892.972765][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  892.991546][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.018354][   T12] usb 3-1: config 0 descriptor??
[  893.042294][ T8992] raw-gadget gadget: fail, usb_ep_enable returned -22
[  893.052192][ T8992] raw-gadget gadget: fail, usb_ep_enable returned -22
[  893.291249][   T35] usb 3-1: USB disconnect, device number 22
21:35:23 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

21:35:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, 0x0)

21:35:23 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:23 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:23 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:23 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000200)=""/4096, 0x1000, <r1=>0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r1, 0x4)

21:35:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:24 executing program 5:
clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/55, 0x37, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58)

21:35:24 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x202000)
listen(r0, 0x13)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0), &(0x7f0000000180)=0xc)

21:35:24 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$PPPOEIOCSFWD(r2, 0x4004b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'lo\x00'}})

21:35:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x5f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:24 executing program 5:
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100801, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, {&(0x7f0000002340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0}], 0x2, 0x40890d2)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000100)=""/164)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)={0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xd, 0xe1, 0x0, 0x0, 0x4})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0)

[  894.242859][ T2476] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  894.481455][ T2476] usb 3-1: Using ep0 maxpacket: 8
[  894.601771][ T2476] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  894.609878][ T2476] usb 3-1: config 0 has no interface number 0
[  894.617444][ T2476] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  894.629086][ T2476] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  894.639699][ T2476] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  894.650069][ T2476] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  894.659724][ T2476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.669131][ T2476] usb 3-1: config 0 descriptor??
[  894.702338][ T9065] raw-gadget gadget: fail, usb_ep_enable returned -22
[  894.709671][ T9065] raw-gadget gadget: fail, usb_ep_enable returned -22
[  894.929282][   T17] usb 3-1: USB disconnect, device number 23
21:35:25 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:35:25 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000))
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:25 executing program 5:
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000033000503f0598064716356c10324fc4454882e225dfb8bfdf4b1313fa80005000a00053582c1b0a8ea8b", 0x2e}], 0x1}, 0x0)

21:35:25 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:25 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:25 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:25 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0)
recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000800)=""/139, 0x8b}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)

21:35:25 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:25 executing program 5:

[  895.911442][ T3851] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  896.161388][ T3851] usb 3-1: Using ep0 maxpacket: 8
[  896.281539][ T3851] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  896.289638][ T3851] usb 3-1: config 0 has no interface number 0
[  896.295882][ T3851] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  896.306990][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  896.317035][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  896.326862][ T3851] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  896.335996][ T3851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.346504][ T3851] usb 3-1: config 0 descriptor??
[  896.372277][ T9143] raw-gadget gadget: fail, usb_ep_enable returned -22
[  896.379615][ T9143] raw-gadget gadget: fail, usb_ep_enable returned -22
[  896.611922][   T35] usb 3-1: USB disconnect, device number 24
21:35:27 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:35:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:27 executing program 1:
shutdown(0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x78, &(0x7f0000000080)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x5a6, @loopback, 0x80000001}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, [], 0x1}}]}, &(0x7f0000000180)=0xc)
r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ipvlan0\x00', 0x10)
r1 = geteuid()
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[], 0x3c, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf250200000014000300fc000000007e0756ad6f738d460b000000000000000000000014000300fc0200"/62], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040000)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200)={0x0, 0xcc5, 0x5, 0x0, 0x40}, 0x14)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x620, 0x8, 0x8, 0x201, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@typed={0x103, 0x53, 0x0, 0x0, @binary="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"}, @typed={0x99, 0x7a, 0x0, 0x0, @binary="ff9b2923f31125773055b55b15ebb976f336c803cf1f3daaa92f4d07c5532463335e76b1d9e64e3cf9def02864c99674ec239424ce363aac7b8438cb2caa3a0e6de6c9a949d4c027c5bced722d8ff4f92af8a08e116546f798c2d8b53791d91c326be57c1afc14094f3466c9846ad5c1dc6d36c8e40452b8c31062de2305b756ccea9994de074e01fc86d75180bfd42c782d3f6958"}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@local}, @nested={0x1c, 0x40, 0x0, 0x1, [@typed={0x16, 0x28, 0x0, 0x0, @str='./cgroup.net/syz1\x00'}]}, @generic="a5a1340719b045c1ebf3f1b5d094e42b40d503b7e8810e29b51e68db13492dbeebffb425512bde76ef46aa92e5552e36d32d5104338ca52d8e491a347379e5052fb1e8f9f9b611ea0e23a8fbc8872b348a7a162277ab8681432b4cb09790db9a730ee38e5b792a03cc886773e73354cd206f4190d0caf0fc8e6f8f3fa15868ee695119d95a73a2ff258e94f7e87d552f22c6eec4c7f374406f862bce33dcad82c6e3f4aade91065f309aef88388fdece72bef1359dd19471b30ad83568c2c798e05fc5049be9b6497ed2471db5a7a1bb3b2c58ae0e348a2d7dacd29ea2acc453215848d6e5286ac293", @nested={0x24, 0x29, 0x0, 0x1, [@typed={0xc, 0x7c, 0x0, 0x0, @u64=0x7ff}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x2}, @typed={0x2a, 0x4f, 0x0, 0x0, @uid}]}, @typed={0x0, 0x12, 0x0, 0x0, @binary="479826dcf1122cf5284611afcb"}, @nested={0x27d, 0x66, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @ipv4=@loopback}, @generic="2e1e97021ffd670236429991467356ce7bf4f07db45fe8dc4eb16c584af25b61f21dc465c9f7f09ffff7465312cc59e69f063e55ba9fc4ff3046b27c34ab353ac237ec2f360600fe54ffb2410e2ccb6e08654f1d06455323463b31816e6b5fb6d5f6d93f3c2308a1455eb2946f01fcff22aa043d", @generic="d2a7612a85d215b3d804d714a8795269a3bca5af74a5fa56116c93684b33c920f85dd0ec0b936e7809235c08e819eae582d959b679da76d5daadb707174f5622edbc1e0bcdeea127bc9f5fe9937005db96961c85da04abe9b60f401ad1450f467a4af09fa5d8e2e26b66543c2dba8b01187e628de290f85d2ba957256a38ea14cb58012dad7978de13e9afeb82616ea218e66bb2dd1f9abed0af0be33405273ec0989a4d3f7876836713ac3b6dc752bf590ea8f2c6", @typed={0x8, 0x16, 0x0, 0x0, @uid=r1}, @generic="08000000000000000e32fec75333685e18663e17de54f4340d1e7ff30c07314df3b140ea85983787dc8d49828629bac16ef9689df903167b40c6669bc34e10e65c7e9160e300cfef1dca0eafc9fe9ec1ed79a238c06c206f94e85dc9f131473cfa5b1ac37d95ce6e52b2ae1b81d763726389fc7ca27ce20d0036d7b6189e97d2304abfd90795c1", @generic="4e41cc815c6363a1fa301a500fd7a595892bb5301989ec53f0c53a03ae723c5360061ef7c9dc04f7f6a80e2264bf3f84abd334f6732adb1253ac5998259228e2a0aaab50d31c8a901bf169076ec14899d8c3c88c9916f5d7eacdade0e1dac614368f6e7c57779966fd23141a09d3ee297a6ca6faf04eb589653d2b2ad75dc45fff71e0e62bf13d802a1c23ec4b4c6c0b75aba13f1a99bb0635d04d3b850d83c60b37a83e431ae8f9b4988d97c983c877be", @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x3}]}, @generic="d52b16ec34a8eb27330d1a"]}, 0x620}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)

21:35:27 executing program 5:

21:35:27 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:27 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:27 executing program 5:

21:35:27 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:27 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x4)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:27 executing program 5:

21:35:27 executing program 5:

[  897.631322][   T35] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  897.871299][   T35] usb 3-1: Using ep0 maxpacket: 8
[  897.991509][   T35] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  897.999577][   T35] usb 3-1: config 0 has no interface number 0
[  898.006923][   T35] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  898.018624][   T35] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  898.029329][   T35] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  898.039704][   T35] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  898.049428][   T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.058917][   T35] usb 3-1: config 0 descriptor??
[  898.082152][ T9209] raw-gadget gadget: fail, usb_ep_enable returned -22
[  898.089405][ T9209] raw-gadget gadget: fail, usb_ep_enable returned -22
[  898.311870][   T35] usb 3-1: USB disconnect, device number 25
21:35:28 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:35:28 executing program 5:

21:35:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c0074e1", @ANYRES16=r1, @ANYBLOB="17090000000000000000030000000800090000000000"], 0x1c}}, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttynull\x00', 0x28000, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5427, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r6 = socket$inet6(0xa, 0x4, 0x0)
shutdown(r6, 0x0)
listen(r6, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:28 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:28 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:29 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:29 executing program 5:

21:35:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:29 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
listen(r0, 0x100000000000012)
unlink(&(0x7f00000000c0)='./file0\x00')
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x9, @empty, 0x3}]}, &(0x7f0000000100)=0xc)

21:35:29 executing program 5:

[  899.291319][   T12] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  899.531180][   T12] usb 3-1: Using ep0 maxpacket: 8
[  899.681585][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  899.689780][   T12] usb 3-1: config 0 has no interface number 0
[  899.696349][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  899.707621][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  899.717824][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  899.727818][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  899.737124][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.746218][   T12] usb 3-1: config 0 descriptor??
[  899.781946][ T9275] raw-gadget gadget: fail, usb_ep_enable returned -22
[  899.789049][ T9275] raw-gadget gadget: fail, usb_ep_enable returned -22
[  900.009655][   T12] usb 3-1: USB disconnect, device number 26
21:35:30 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:30 executing program 5:

21:35:30 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f00000000c0)={0x9f0000, 0x20, 0x3ff, <r3=>r0, 0x0, &(0x7f0000000040)={0x0, 0x3, [], @p_u16=&(0x7f0000000000)=0x7}})
read$usbmon(r3, &(0x7f0000000300)=""/237, 0xed)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ashmem\x00', 0x2, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x1c1102, 0x0)
dup2(r4, r5)
r6 = openat$vcsu(0xffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x204000, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000400)={0x0, @sdr={0x30323953, 0x101}})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000200)={0x1, @sdr={0x38414762}})
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000140)={0x0, 0x4, 0x6})

21:35:30 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:30 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:30 executing program 5:

21:35:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:30 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:30 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:30 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:30 executing program 5:

21:35:30 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = openat$vcs(0xffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x10000, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000000300)="371e996deba41af6b4f6d199156e1df84711756f8a83953c87a9c62f4e127a6c3e06d84926fa98ac6c4163b206ccf386f6baaf", &(0x7f0000000340)=""/10, 0x4}, 0x1c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x100}, &(0x7f0000000280)=0x8)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket(0x18, 0x80000, 0x80000000)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000000)=0xc)
chown(&(0x7f0000000040)='./file0/bus\x00', 0x0, r8)
chown(&(0x7f0000000100)='./file0\x00', r6, r8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r3, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x401, @empty, 0x100}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0xffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x37}, 0x1000}]}, &(0x7f0000000180)=0xc)

21:35:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:31 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:31 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:31 executing program 2:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:31 executing program 5:

21:35:31 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
listen(r2, 0x802)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7fff}]}, &(0x7f0000000180)=0xc)
ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x1490)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth0_macvtap\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="4d00000000020000060000007f0209037c0800000010000001800000000000000200000002000000190000000900000001000000"]})
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000080), 0x4)

21:35:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:31 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:31 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1a01000008656a40d8050a81bdd5000000010902120001000000000904"], 0x0)
syz_open_dev$hidraw(0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5e, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x4)

21:35:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:31 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3}, &(0x7f0000000000)=0xc)

21:35:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:31 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x1, 0x4)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
sysfs$3(0x3)
read$snddsp(r4, &(0x7f00000000c0)=""/183, 0xb7)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  901.811214][   T35] usb 6-1: new high-speed USB device number 18 using dummy_hcd
21:35:32 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

21:35:32 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
dup2(r3, r1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8000, @local, 0x8}, 0x1c)
shutdown(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x0, [0x20, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x38c6]}, 0x5c)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:32 executing program 2:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:32 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  902.171735][   T35] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=d5.bd
[  902.186519][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.222814][   T35] usb 6-1: config 0 descriptor??
[  902.486869][   T12] usb 6-1: USB disconnect, device number 18
[  903.252759][ T2476] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  903.625811][ T2476] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=d5.bd
[  903.634986][ T2476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.644674][ T2476] usb 6-1: config 0 descriptor??
21:35:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = dup2(r1, r2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
listen(r5, 0x9)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0x9b0000, 0xfffffffd, 0xffffffff, r3, 0x0, &(0x7f00000000c0)={0x990a5e, 0x8, [], @string=&(0x7f0000000000)=0x1}})
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0x40}]}, &(0x7f0000000180)=0xc)

21:35:34 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

21:35:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:34 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0xed, 0x11, 0x5d, 0x40, 0x2001, 0x1a02, 0xf89b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0x5d, 0x8b}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

21:35:34 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0)

21:35:34 executing program 2:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

[  903.884243][ T3851] usb 6-1: USB disconnect, device number 19
21:35:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ip6_vti0\x00', 0x1})
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20100, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7fff)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
readahead(r0, 0x0, 0xfffffff8)

21:35:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:34 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:34 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = dup2(r1, r2)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000000c0)={0x2, 0x0, [], {0x0, @bt={0x3, 0x4, 0x1, 0x2, 0x4, 0x11, 0x8, 0x9, 0x4, 0x9, 0xff, 0xe86e, 0x35, 0x1000, 0x11, 0xc, {0x6, 0x7}, 0x11, 0x8}}})
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e20, @multicast2}})
shutdown(r0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06055c8, &(0x7f0000000200)={0xf, 0x800, {0x54, 0x5, 0xfffc, {0x5, 0x87}, {0x9, 0x9}, @ramp={0x31e, 0x7, {0x1ff, 0x40, 0x8, 0xfffb}}}, {0x53, 0x0, 0x7fff, {0xfff, 0x100}, {0x2, 0x3}, @period={0x5d, 0x6, 0x2, 0x5, 0x3, {0x4fa, 0x9, 0x5, 0x64f}, 0x4, &(0x7f0000000040)=[0x1, 0x4, 0x6, 0x3ec]}}})
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

[  904.420961][ T3851] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  904.812171][ T3851] usb 6-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b
[  904.821312][ T3851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.830185][ T3851] usb 6-1: config 0 descriptor??
[  905.541036][ T3851] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  906.910901][ T3851] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  906.921051][ T3851] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9
[  906.981012][ T3851] asix: probe of 6-1:0.0 failed with error -71
[  906.991551][ T3851] usb 6-1: USB disconnect, device number 20
[  907.660804][   T17] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  908.020886][   T17] usb 6-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b
[  908.029927][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.044879][   T17] usb 6-1: config 0 descriptor??
21:35:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x8000)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r6)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={r8}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000000)={r8, 0x2170}, &(0x7f0000000040)=0x8)

21:35:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:38 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:38 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a050e0340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"F'], 0x0}, 0x0)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2002, 0x0)

21:35:38 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[  908.312572][   T17] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
21:35:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  908.359421][   T17] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9
21:35:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
connect$packet(r2, &(0x7f0000000040)={0x11, 0xf8, r3, 0x1, 0x20, 0x6, @local}, 0x14)
ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff)
listen(r0, 0x100000000000012)
r4 = socket$inet(0x2, 0x80001, 0x84)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r6, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9d6b, @dev={0xfe, 0x80, [], 0x2c}, 0x401}]}, &(0x7f0000000180)=0xc)

21:35:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'dummy0\x00', {}, 0x800})
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

[  908.451898][   T17] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  908.491107][   T17] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  908.533381][   T17] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
21:35:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
fstat(r0, &(0x7f0000000000))
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x8)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000140)=""/38)
dup2(r3, r4)
ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000100)={'veth0_to_hsr\x00', {0x2, 0x4e22, @broadcast}})

[  908.663984][   T17] asix: probe of 6-1:0.0 failed with error -71
[  908.679274][   T17] usb 6-1: USB disconnect, device number 21
21:35:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:38 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x80, @multicast1}]}, &(0x7f0000000180)=0xc)

[  908.780875][ T2476] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  909.080737][ T2476] usb 3-1: device descriptor read/64, error 18
[  909.087011][   T17] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  909.481288][   T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  909.492382][ T2476] usb 3-1: device descriptor read/64, error 18
[  909.498561][   T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  909.508809][   T17] usb 6-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40
[  909.518217][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.527601][   T17] usb 6-1: config 0 descriptor??
[  909.760643][ T2476] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  910.013221][   T17] wacom 0003:056A:030E.0002: unknown main item tag 0x0
[  910.030989][ T2476] usb 3-1: device descriptor read/64, error 18
[  910.042251][   T17] wacom 0003:056A:030E.0002: Unknown device_type for 'HID 056a:030e'. Assuming pen.
[  910.062151][   T17] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:030E.0002/input/input19
[  910.083049][   T17] wacom 0003:056A:030E.0002: hidraw0: USB HID v0.00 Device [HID 056a:030e] on usb-dummy_hcd.5-1/input0
[  910.244817][   T17] usb 6-1: USB disconnect, device number 22
[  910.430616][ T2476] usb 3-1: device descriptor read/64, error 18
[  910.552492][ T2476] usb usb3-port1: attempt power cycle
[  911.090630][ T3851] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  911.260570][ T2476] usb 3-1: new high-speed USB device number 29 using dummy_hcd
21:35:41 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

[  911.390700][ T2476] usb 3-1: device descriptor read/8, error -71
[  911.490720][ T3851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.501667][ T3851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.511601][ T3851] usb 6-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40
[  911.520726][ T3851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.529572][ T3851] usb 6-1: config 0 descriptor??
[  911.600712][ T2476] usb 3-1: device descriptor read/8, error -71
[  911.720644][ T3851] usbhid 6-1:0.0: can't add hid device: -71
[  911.726641][ T3851] usbhid: probe of 6-1:0.0 failed with error -71
[  911.741769][ T3851] usb 6-1: USB disconnect, device number 23
[  912.101307][ T2476] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  912.282167][ T2476] usb 3-1: device descriptor read/8, error -61
[  912.552394][ T2476] usb 3-1: device descriptor read/8, error -61
21:35:42 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:42 executing program 1:
r0 = socket$inet6(0xa, 0x80000, 0xfffffffe)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5e, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000))

21:35:42 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

[  912.672916][ T2476] usb usb3-port1: unable to enumerate USB device
21:35:42 executing program 1:
r0 = socket$inet6(0xa, 0x80000, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @empty, 0x80}]}, &(0x7f0000000180)=0xc)

21:35:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:43 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$mice(0xffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x187400)
sendto$unix(r2, &(0x7f0000000100)="10b3f8625e7bc8b48a7a49ed133b4930bc3e6fcde3fa5bda3b6a1e9bd742e14e731eef3ac032851dca23aa1711fcbc927613d9a994fba82e330102e996e09f668dd8d7dd1102acfe493f8c996a86174c2d048f9617c12a", 0x57, 0x2000c015, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r3)
getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
r6 = socket(0x3, 0x80000, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r7, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x50a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r7, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @private=0xa010100}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x6}, 0x408c0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  912.910620][   T12] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  913.030580][ T3851] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  913.210485][   T12] usb 3-1: device descriptor read/64, error 18
[  913.420610][ T3851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.431662][ T3851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.443022][ T3851] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  913.452722][ T3851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.465963][ T3851] usb 6-1: config 0 descriptor??
[  913.620427][   T12] usb 3-1: device descriptor read/64, error 18
[  913.890416][   T12] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  913.951564][ T3851] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  913.963960][ T3851] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input22
[  914.048629][ T3851] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  914.160616][   T12] usb 3-1: device descriptor read/64, error 18
[  914.161334][ T2476] usb 6-1: USB disconnect, device number 24
21:35:44 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

[  914.770360][   T12] usb 3-1: device descriptor read/64, error -71
[  914.890624][   T12] usb usb3-port1: attempt power cycle
[  915.070385][ T2476] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  915.460602][ T2476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  915.471733][ T2476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  915.482003][ T2476] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  915.491125][ T2476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.500056][ T2476] usb 6-1: config 0 descriptor??
[  915.600324][   T12] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  915.774250][   T12] usb 3-1: device descriptor read/8, error -61
[  915.830484][ T2476] usbhid 6-1:0.0: can't add hid device: -71
[  915.836520][ T2476] usbhid: probe of 6-1:0.0 failed with error -71
[  915.852774][ T2476] usb 6-1: USB disconnect, device number 25
[  916.050343][   T12] usb 3-1: device descriptor read/8, error -61
[  916.320264][   T12] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  916.490530][   T12] usb 3-1: device descriptor read/8, error -61
[  916.760488][   T12] usb 3-1: device descriptor read/8, error -61
21:35:47 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:47 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:47 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000021000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00')
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:35:47 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

[  916.882397][   T12] usb usb3-port1: unable to enumerate USB device
21:35:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:47 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2}, 0x0)
mlockall(0x1)

21:35:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  917.130270][ T2476] usb 3-1: new high-speed USB device number 35 using dummy_hcd
21:35:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:47 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

[  917.410260][ T2476] usb 3-1: device descriptor read/64, error 18
[  917.990326][ T2476] usb 3-1: device descriptor read/64, error -71
[  918.280186][ T2476] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  918.570173][ T2476] usb 3-1: device descriptor read/64, error 18
[  918.970205][ T2476] usb 3-1: device descriptor read/64, error 18
[  919.090263][ T2476] usb usb3-port1: attempt power cycle
[  919.810146][ T2476] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  920.010443][ T2476] usb 3-1: device descriptor read/8, error -61
[  920.290165][ T2476] usb 3-1: device descriptor read/8, error -61
21:35:51 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:51 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = gettid()
tkill(r3, 0x1004000000016)
sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x2, r3, 0x7, 0x38c, 0x9, 0xfffffffa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:51 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0040001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99ad6f8f9fc0ebf8b0b14f2ac662f901371b884bee22df71c63c5d05692e664ebf68e6faa53367f05f4ad6142134962f11e931e7d62ead03b53455560c8ef00fca4fafa90bedfe92175aaa1c4ecceeb72e0d050feace34b52d9e5f755563698c7e08000000866f15da7f480800b100000000050000be5d2dd15b07000000ed19bca008388e736e518b98d91c22def1125d7b1e821039a95ad8b91ceaf3e0b555002f", 0xe4}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

21:35:51 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:51 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

21:35:51 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcfd47d0100007a5acf99d907ae33a8e9a579aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f7be65199611845d58ea9c822ca647689f52050787f9d2dd3f075de6c57285b134afca59e7c4b9b6f5dc68a847900ef78c5548c3c13a416a95cdf6cc954", 0x89}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  921.507299][ T9749] ptrace attach of "/root/syz-executor.5"[9748] was attempted by "/root/syz-executor.5"[9749]
21:35:51 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @private0, @mcast2}}}}}, 0x3a)
splice(r0, 0x0, r2, 0x0, 0x18100, 0x0)

21:35:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  921.572955][ T9760] ptrace attach of "/root/syz-executor.5"[9759] was attempted by "/root/syz-executor.5"[9760]
21:35:51 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcfd47d0100007a5acf99d907ae33a8e9a579aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f7be65199611845d58ea9c822ca647689f52050787f9d2dd3f075de6c57285b134afca59e7c4b9b6f5dc68a847900ef78c5548c3c13a416a95cdf6cc954246799c28d03db119f6c76c22c78241eaf06", 0x9b}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

21:35:51 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:51 executing program 5:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000740)="66530700163da682530c0000053c27bc3376003639405cb4aed12f0040001500ae47a825d86800278dcff47df5bf00805acf4f8f36460204002479aed75d492b415bcee00a9fc0ebf8b0b14f2ac662f901371b884bee22df71c63c5d05692e", 0x5f}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[  921.686333][ T9770] ptrace attach of "/root/syz-executor.5"[9769] was attempted by "/root/syz-executor.5"[9770]
[  921.757509][ T9775] ptrace attach of "/root/syz-executor.5"[9773] was attempted by "/root/syz-executor.5"[9775]
[  921.800167][ T3828] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  922.079990][ T3828] usb 3-1: device descriptor read/64, error 18
[  922.490033][ T3828] usb 3-1: device descriptor read/64, error 18
[  922.760051][ T3828] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  923.029919][ T3828] usb 3-1: device descriptor read/64, error 18
[  923.419997][ T3828] usb 3-1: device descriptor read/64, error 18
[  923.541523][ T3828] usb usb3-port1: attempt power cycle
[  924.249870][ T3828] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  924.421537][ T3828] usb 3-1: device descriptor read/8, error -61
[  924.630676][ T3828] usb 3-1: device descriptor read/8, error -71
21:35:55 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:35:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:55 executing program 5:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000300)='\x00\x00\x03\x00\x00\x00\x00\v\x00x\x92\x12\xbc\x06^\xbe\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x01\x01\x00\x00\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\"\xde~\x7f\xder\x8d\xe3\x00'/211)

21:35:55 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x0, 0x80, 0x1, 0x0, 0x2, 0x6, 0x5, 0x395, 0x34, 0x1a9, 0x7ff, 0x8, 0x20, 0x2, 0x0, 0x0, 0x4}, [{0x70000000, 0x3, 0x80000000, 0x6, 0xfffffc00, 0x1, 0x9, 0x4}, {0x7, 0x5, 0x1, 0x8, 0xdd5, 0x7, 0x2, 0x26d6067c}], "c5e4acb768f672a05ac7f6293eaf259d4c29a10b6147c1eff1f4495b81cc092546542804eb1092b6db549d9b56b360c66127a73c7e4c1c32a6ad77462735aa87349b0549832da8aa87d775d8c774c67954144e93d6bda4ace94125c354c9c07a8fff04ce5ae9fda666572f477b011b", [[], [], [], [], [], [], [], [], []]}, 0x9e3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:55 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:35:55 executing program 4:

21:35:56 executing program 1:
r0 = socket$inet6(0xa, 0x4, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x505440, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5427, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r6, 0x5427, 0x0)
ioctl$FITHAW(r6, 0xc0045878)
dup2(r5, r2)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x99, @empty, 0x3}, {0xa, 0x4e20, 0x4, @local, 0xfffffe00}, 0x3, [0x7, 0x8, 0x78f, 0x1f, 0x9, 0x77f, 0x4, 0xff]}, 0x5c)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:35:56 executing program 5:

21:35:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:35:56 executing program 4:
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x80, 0x400}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x7, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000004c0)=""/227}, 0x20)
socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="16697bbf832abfa0a84dfd60f4d7b513c397f0dbcf62c951a1f18cb2a3a6201ca980587b09f196364596dc21e875f7cf6ecddc9eb07b3c0b1c88bd04f10a25caaf8e767322df7b2793c0c956c9e00ce697774515d8caced229f100ef4675ab692ba3b11d486d3e579f214d0d023a9b", &(0x7f0000000400)=""/115}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x5, 0x0, 0x0, 0xfffffffa, 0x94, &(0x7f0000000300)=""/148, 0x0, 0x1, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0xc)

21:35:56 executing program 5:
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x80, 0x400}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x7, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000004c0)=""/227}, 0x20)
socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="16697bbf832abfa0a84dfd60f4d7b513c397f0dbcf62c951a1f18cb2a3a6201ca980587b09f196364596dc21e875f7cf6ecddc9eb07b3c0b1c88bd04f10a25caaf8e767322df7b2793c0c956c9e00ce697774515d8caced229f100ef4675ab692ba3b11d486d3e579f214d0d023a9bfde1ac", &(0x7f0000000400)=""/115}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="1831080eb7f47d05f6b359ec1bbb9f00000bffc8649eff050000000000000063493f08358b00"/56], 0x0, 0xfffffffa, 0x94, &(0x7f0000000300)=""/148, 0x41100, 0x1, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, 0x0}, 0x78)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0xc)

21:35:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  926.119808][   T17] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  926.399813][   T17] usb 3-1: device descriptor read/64, error 18
[  926.789814][   T17] usb 3-1: device descriptor read/64, error 18
[  927.059757][   T17] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  927.329693][   T17] usb 3-1: device descriptor read/64, error 18
[  927.719680][   T17] usb 3-1: device descriptor read/64, error 18
[  927.839805][   T17] usb usb3-port1: attempt power cycle
[  928.549622][   T17] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  928.719745][   T17] usb 3-1: device descriptor read/8, error -61
[  928.929750][   T17] usb 3-1: device descriptor read/8, error -71
21:36:00 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:00 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
gettid()

21:36:00 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x612102, 0x0)
r2 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x406002)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
listen(r3, 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:00 executing program 5:
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x80, 0x400}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x7, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000004c0)=""/227}, 0x20)
socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="16697bbf832abfa0a84dfd60f4d7b513c397f0dbcf62c951a1f18cb2a3a6201ca980587b09f196364596dc21e875f7cf6ecddc9eb07b3c0b1c88bd04f10a25caaf8e767322df7b2793c0c956c9e00ce697774515d8caced229f100ef4675ab692ba3b11d486d3e579f214d0d023a9bfde1ac", &(0x7f0000000400)=""/115}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="1831080eb7f47d05f6b359ec1bbb9f00000bffc8649eff050000000000000063493f08358b00"/56], 0x0, 0xfffffffa, 0x94, &(0x7f0000000300)=""/148, 0x41100, 0x1, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, 0x0}, 0x78)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0xc)

21:36:00 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:00 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
recvfrom$unix(r2, &(0x7f0000000000)=""/3, 0x3, 0x1a2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:00 executing program 4:
socket$kcm(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x80, 0x400}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x7, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000004c0)=""/227}, 0x20)
socket$kcm(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x7a00, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="1831080eb7f47d05f6b359ec1bbb9f00000bffc864"], 0x0, 0xfffffffa, 0x94, &(0x7f0000000300)=""/148, 0x41100, 0x1, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0xc)

21:36:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:00 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001940)=""/135, 0x87}, {&(0x7f0000001b00)=""/115, 0x73}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005b00)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0)

21:36:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  930.406384][ T3851] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  930.649558][ T3851] usb 3-1: Using ep0 maxpacket: 8
[  930.769642][ T3851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  930.779918][ T3851] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  930.788858][ T3851] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  930.800818][ T3851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.817070][ T3851] usb 3-1: config 0 descriptor??
21:36:01 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:01 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x3)
shutdown(r0, 0x0)
getrandom(&(0x7f0000000080)=""/92, 0x5c, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, 0x14, 0x100, 0x70bd25, 0x25dfdbfe, {0x1, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "b3adbd24d6d8cbae05a30420112704d4bc06e8b74e36638e56832490824635038f66c435e2e734fec1af3499cdd48506ff8b6b9280347b09d2203963cee891dcd578079490b98dc913a71752e3061cd3be59ee0ee267fb37fb3cc5855061acb48e13c735203ee9e3d2b70fd3cb919b123ded464d2e683fedfae94da063bc68fc520b9eba4f57cd84a3ba2a04511e61600d3b492ed6e458dfc66202f6b87bbec87fef007ad02384ea09c97b4420380e77821495fe76b854f81467546e7f17e9a4a6214378c9526d4a2755ed1219e699036b3270860de1e1d0a8c1c2f494c50eb446f76766"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8054}, 0x4000000)
r3 = socket$inet(0x2, 0x80001, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x1b, "89b60ce73f6962cf8408d059492e5eefa6e24b154c9ff7b5aff844"}, &(0x7f00000005c0)=0x23)
dup2(r1, r2)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r6, r7)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "f8db2665b5886af6", "40a70b5a107c880c65304ff3e4ba127e", "5cb3c7e1", "af9de13836bf4810"}, 0x28)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x1)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x80, 0x4)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0xcf5, @private0={0xfc, 0x0, [], 0x1}, 0x4c51e564}]}, &(0x7f0000000180)=0xc)

21:36:01 executing program 4:
socket$kcm(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x4, 0x80, 0x400}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x7, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f00000004c0)=""/227}, 0x20)
socket$kcm(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x7a00, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="1831080eb7f47d05f6b359ec1bbb9f00000bffc864"], 0x0, 0xfffffffa, 0x94, &(0x7f0000000300)=""/148, 0x41100, 0x1, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa}, 0x8, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0xc)

21:36:01 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r0, &(0x7f0000000740)=[{&(0x7f0000002900)=""/165, 0xa5}], 0x1, 0x0)
mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff)
read$FUSE(r0, &(0x7f0000000780), 0x1000)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x0, 0x1a51002}}, 0x50)
read$FUSE(r0, &(0x7f0000001780), 0x1000)
write$FUSE_ENTRY(r0, &(0x7f0000002840)={0x90, 0x0, 0x2}, 0x90)
write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x651, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90)

21:36:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  931.069776][   T17] usb 3-1: USB disconnect, device number 47
21:36:01 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:01 executing program 4:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0)

21:36:01 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:01 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket(0x1a, 0x2, 0x6)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1a8, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000)
shutdown(r0, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000))
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2c}}]}, &(0x7f0000000180)=0xc)

21:36:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:01 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:01 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x29, 0x80005, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)

21:36:01 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x80000000002)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x4000, 0x4)

21:36:01 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0xa5a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f0000000000), &(0x7f0000001840)=ANY=[@ANYBLOB="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"]}, 0xbb2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r3, r4)
ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000200)={[], 0x4, 0x400, 0x9, 0x0, 0x2, 0x2, 0x6000, [], 0x6})
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0xc)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5427, 0x0)
dup3(0xffffffffffffffff, r5, 0x0)

21:36:01 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:02 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r2, 0x0, 0x7fff)

[  931.909561][   T12] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  931.957551][ T9936] new mount options do not match the existing superblock, will be ignored
[  931.983147][ T9936] new mount options do not match the existing superblock, will be ignored
[  932.189501][   T12] usb 3-1: Using ep0 maxpacket: 8
[  932.319496][   T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.329855][   T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  932.338863][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  932.350130][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.367200][   T12] usb 3-1: config 0 descriptor??
[  932.625537][   T17] usb 3-1: USB disconnect, device number 48
21:36:03 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:03 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x2, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000000))
shutdown(r0, 0x0)
prctl$PR_GET_SECUREBITS(0x1b)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:03 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:03 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:03 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  933.198350][ T9960] new mount options do not match the existing superblock, will be ignored
21:36:03 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:03 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:03 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x80000, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:03 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:03 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:03 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:03 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[  933.474868][ T9982] new mount options do not match the existing superblock, will be ignored
[  933.510316][   T12] usb 3-1: new high-speed USB device number 49 using dummy_hcd
21:36:03 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  933.759467][   T12] usb 3-1: Using ep0 maxpacket: 8
[  933.899399][   T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  933.909873][   T12] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  933.918829][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  933.928326][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.937789][   T12] usb 3-1: config 0 descriptor??
[  934.194311][   T17] usb 3-1: USB disconnect, device number 49
21:36:04 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:04 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:04 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:04 executing program 1:
r0 = socket$inet6(0xa, 0x800, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@rc, &(0x7f0000000040)=0x80, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r5, r6)
r7 = openat(r6, &(0x7f0000000140)='./file0\x00', 0x4100, 0x1)
write$P9_RRENAMEAT(r7, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7)
connect$can_j1939(r1, &(0x7f0000000700)={0x1d, r4, 0x3, {0x3, 0x1, 0x1}}, 0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r8 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0)
ioctl$TIOCGPTPEER(r8, 0x5441, 0xd4)

21:36:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:04 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:04 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  934.768761][T10012] new mount options do not match the existing superblock, will be ignored
21:36:05 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:05 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:05 executing program 1:
r0 = socket$inet6(0xa, 0x800, 0x3)
r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x3}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x86, 0x8, "247901715a01"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:05 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  935.060917][T10037] new mount options do not match the existing superblock, will be ignored
[  935.159398][   T12] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  935.449250][   T12] usb 3-1: Using ep0 maxpacket: 8
[  935.579675][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  935.587732][   T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  935.599215][   T12] usb 3-1: config 0 has no interface number 0
[  935.605324][   T12] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  935.616893][   T12] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  935.632107][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  935.641981][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.658183][   T12] usb 3-1: config 0 descriptor??
[  935.712248][   T12] snd-usb-audio: probe of 3-1:0.2 failed with error -2
[  935.915101][   T12] usb 3-1: USB disconnect, device number 50
21:36:06 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:06 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:06 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:06 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x1000006)
fcntl$setpipe(r0, 0x407, 0xfffffe00)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = dup2(r1, r2)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
shutdown(r5, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r7, 0xab9535e9a6578fc1}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1460, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x4}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SUPP_RATES={0x13ac, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb5, 0x2, "63510ce4b6f34aace8553e121b6a173b9f9defbceddf5dcc0060ada09161fde99893e0e5205a2dd8fc067834cf6a4a514c72764cfa7ade4ed64812f91f3a0f26f2a3b0e92715ffe360d9e64391db2b4b33ce16877cdb930ffbec1a697cc1f8a8e320326039e4f1b0cdbbdb7bbbae29c1ebead320e8cc05e7db4f24f40072159161a7d6b7c660868ede4a40ac59324d4dc8487c940063d934690fc48a890af5aa08b4b2ebae2e73f4bc163e54b8a3fbab24"}, @NL80211_BAND_60GHZ={0x20, 0x2, "044a809a621534c3a461491af8d67afd7bd9b851cede0a8e3ecb1da8"}, @NL80211_BAND_6GHZ={0xaa, 0x3, "645a64ce1c2ceedf70c6ac4f1aee3cd2a6a5d37838d5577589de091a26f33fa162fea326e336ef345e52f1d032d11341239fad715707422f568a9d57b07c3e1510e907d89db15d746a388d2a9d2f82b09e5961b00b633b2dfcdb4c0249076657aa002fc80828bc884305b7f7c90c2d91f9213b828299c28b4e8255e2cc3c0036014ce9dcf167a8c073256d7a7aee0d37cf524960f3c172207a25c8c97ab6c5fa996cedbd1406"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_60GHZ={0xc7, 0x2, "7fd34f4e9ff93a749807ed14db37fa5aca0cce8cc5b404a39efb26ac15743f4900d4bd18a63fbc39d484b2f530b0927f2ae2653eba77f3fa040451c046901572f3af789fdb5e0640029fdf6f74771f42ebc5073d1bdef368b244490a47eafae36d616596633d0662079de1f8a65d7ee2d6a6e5f6c81292d9cad48491023ce37395b203986dd13014d18c26cacd9430c8a67b91e692a478b6c270f797d60d0464d2c3712ae6a46e69be8476156a0925d19a267b703cbbc78321748439aedabee2f0ed18"}, @NL80211_BAND_60GHZ={0x87, 0x2, "99df7df814ff4223f65f0e3b7226d023b11a12e0448d87d417d4a5621b2f5b847bfd38f7577f564332a4e3df9acf7da4b3b837249c032bea77b5fb89eabb9cac8f8ee7f16c52e829cedd09e83e6a9c99abefb3df53a25fda21e7dcd3f78960866593ee034571e4c15d2cd1986aa10e4d0e930daa0d81976f83159ea33292207f4d380f"}, @NL80211_BAND_5GHZ={0x7, 0x1, "267ddc"}, @NL80211_BAND_6GHZ={0x61, 0x3, "d1e7294e42fd04c20edd24df7fb6b453f4b4a5c35604062c30c1dd7fc96c6ab17e5a0faa05c7263311261fc4440426ff5e90dac70c2a5ac3badb504c47e4fcc66005d17ffc4b40ec04c428316351489c5e7121c6066b2b69bc9e220d62"}, @NL80211_BAND_2GHZ={0x61, 0x0, "cff4de879c4f87cfdf2341c4ebb95c9fa7740c281f3372f432bedcd98bfcc9764150815adc079372fc6fad6e56876887b5c075f4effc91fb0b94e31f3ddb355d0a0589d38e5de647c4245c28ce7551c039ebe6201fdb14d77c7a6cf9ea"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3f, 0x9}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xb, 0x0, [0x5, 0x7, 0x11, 0x2, 0x4, 0x1c, 0x15]}, {0x7, 0x0, [0x20, 0xd, 0x1]}, {0xe, 0x0, [0x10, 0x6, 0x10, 0x4, 0xf, 0x1, 0x17, 0x1a, 0x1f, 0xf]}, {0xc, 0x0, [0x10, 0xe, 0x15, 0x16, 0x12, 0x18, 0x8, 0x2]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x913}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xff}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}]}, 0x1460}, 0x1, 0x0, 0x0, 0xc820}, 0x4010)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:06 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:06 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:06 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  936.461167][T10063] new mount options do not match the existing superblock, will be ignored
21:36:06 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:06 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:06 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = socket$inet(0x2, 0x80001, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000180)=0xc)

21:36:06 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  936.647633][T10078] new mount options do not match the existing superblock, will be ignored
21:36:06 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  936.969189][   T17] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  937.209177][   T17] usb 3-1: Using ep0 maxpacket: 8
[  937.329347][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  937.337495][   T17] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  937.349161][   T17] usb 3-1: config 0 has no interface number 0
[  937.355298][   T17] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  937.366999][   T17] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  937.380629][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  937.390544][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.405277][   T17] usb 3-1: config 0 descriptor??
[  937.453528][   T17] snd-usb-audio: probe of 3-1:0.2 failed with error -2
[  937.654535][   T12] usb 3-1: USB disconnect, device number 51
21:36:08 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:08 executing program 5:
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:08 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r2)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x64, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4bd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x10000)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000040)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r4, r5)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffff81}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000800)

21:36:08 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:08 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:08 executing program 5:
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  938.205841][T10110] new mount options do not match the existing superblock, will be ignored
21:36:08 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff)

21:36:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x6f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:08 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
shutdown(r0, 0x0)
listen(r0, 0x100000000000012)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r2, r3)
write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, 0x1, {{0x100000001, 0x2612, 0x8, 0x1, 0x1, 0x2, 0x46, 0x4}}}, 0x60)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r1, r4)
getsockopt(r4, 0x8, 0x71, &(0x7f00000000c0)=""/135, &(0x7f0000000000)=0x87)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:08 executing program 5:
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:08 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  938.355909][T10122] new mount options do not match the existing superblock, will be ignored
[  938.679258][   T12] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  938.939114][   T12] usb 3-1: Using ep0 maxpacket: 8
[  939.059281][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  939.067526][   T12] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  939.078878][   T12] usb 3-1: config 0 has no interface number 0
[  939.085812][   T12] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  939.096952][   T12] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  939.110418][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  939.120197][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.133169][   T12] usb 3-1: config 0 descriptor??
[  939.185262][   T12] snd-usb-audio: probe of 3-1:0.2 failed with error -2
[  939.387148][ T9523] usb 3-1: USB disconnect, device number 52
21:36:10 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:10 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff)

21:36:10 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
migrate_pages(0x0, 0x4, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x401)

21:36:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:10 executing program 5:
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:10 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:10 executing program 5:
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  939.971795][T10154] new mount options do not match the existing superblock, will be ignored
21:36:10 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3})
socket$inet(0x2, 0x0, 0x0)

21:36:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:10 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff)

21:36:10 executing program 5:
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  940.084879][T10168] new mount options do not match the existing superblock, will be ignored
21:36:10 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x7fff)

[  940.220537][T10181] new mount options do not match the existing superblock, will be ignored
[  940.329174][ T9523] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  940.568963][ T9523] usb 3-1: Using ep0 maxpacket: 8
[  940.689017][ T9523] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  940.697203][ T9523] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  940.708555][ T9523] usb 3-1: config 0 has no interface number 0
[  940.716066][ T9523] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  940.727733][ T9523] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  940.737799][ T9523] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  940.752200][ T9523] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  940.761326][ T9523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.774142][ T9523] usb 3-1: config 0 descriptor??
[  940.799706][T10160] raw-gadget gadget: fail, usb_ep_enable returned -22
[  940.859187][ T9523] usb 3-1: invalid MIDI in EP 0
[  940.865252][ T9523] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  941.026438][   T12] usb 3-1: USB disconnect, device number 53
[  941.384240][    T0] NOHZ: local_softirq_pending 08
21:36:11 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:11 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x7fff)

21:36:11 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x0, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:11 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x7ff, 0x20000)
r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x6100, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000740)='./file1\x00', 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x24, 0x0, &(0x7f0000000000)=0xfffffffffffffdd1)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00')
geteuid()
geteuid()
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44035)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
getpgid(0x0)
r2 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x200440e4)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5})
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x81, 0x6, 0x1, 0x3ff, 0x0, 0x6, 0x22003, 0x6, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000480), 0x5}, 0x10a, 0x0, 0x5, 0x6, 0x20, 0x2, 0xfff}, 0x0, 0xb, r1, 0x1)
socket$inet(0x2, 0x4, 0x6b)

21:36:11 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  941.593443][T10203] new mount options do not match the existing superblock, will be ignored
21:36:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:11 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x7fff)

21:36:11 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:11 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x0, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:11 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x20000)
perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xe}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
geteuid()
r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x1a3403)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
socket$inet(0x2, 0x4, 0x6b)

[  941.796486][T10222] new mount options do not match the existing superblock, will be ignored
[  941.908985][   T17] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  942.148956][   T17] usb 3-1: Using ep0 maxpacket: 8
[  942.272385][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  942.286068][   T17] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  942.303470][   T17] usb 3-1: config 0 has no interface number 0
[  942.311409][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  942.327119][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  942.337869][   T17] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  942.351569][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  942.361116][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.374825][   T17] usb 3-1: config 0 descriptor??
[  942.399896][T10209] raw-gadget gadget: fail, usb_ep_enable returned -22
[  942.459123][   T17] usb 3-1: invalid MIDI in EP 0
[  942.464971][   T17] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  942.636023][   T12] usb 3-1: USB disconnect, device number 54
21:36:13 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:13 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x0, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:13 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

21:36:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
r4 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={<r5=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x1e8a0200, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x48}}, 0x0)

21:36:13 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  943.184166][T10259] new mount options do not match the existing superblock, will be ignored
21:36:13 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

[  943.256267][T10261] device batadv0 entered promiscuous mode
21:36:13 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:13 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

[  943.326851][T10261] device batadv0 left promiscuous mode
[  943.333708][T10274] new mount options do not match the existing superblock, will be ignored
21:36:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:13 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

[  943.406755][T10279] new mount options do not match the existing superblock, will be ignored
[  943.599033][ T3851] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  943.848852][ T3851] usb 3-1: Using ep0 maxpacket: 8
[  943.969060][ T3851] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  943.977091][ T3851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  943.987806][ T3851] usb 3-1: config 0 has no interface number 0
[  943.994019][ T3851] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  944.005073][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  944.015094][ T3851] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  944.028794][ T3851] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  944.037837][ T3851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.047559][ T3851] usb 3-1: config 0 descriptor??
[  944.069672][T10265] raw-gadget gadget: fail, usb_ep_enable returned -22
[  944.129137][ T3851] usb 3-1: invalid MIDI in EP 0
[  944.134488][ T3851] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  944.296425][   T17] usb 3-1: USB disconnect, device number 55
21:36:14 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:14 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:14 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:14 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000940)='/dev/md0\x00', 0x0, 0x0)
lseek(r0, 0x7f, 0x1)

21:36:14 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:14 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:15 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:15 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x101}}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x34}}, 0x0)

21:36:15 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:15 executing program 4:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:15 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

21:36:15 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:15 executing program 4:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

[  945.266011][   T17] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  945.508760][   T17] usb 3-1: Using ep0 maxpacket: 8
[  945.629509][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  945.637647][   T17] usb 3-1: config 0 has no interface number 0
[  945.648943][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  945.663884][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  945.675163][   T17] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  945.692141][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  945.701812][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.715562][   T17] usb 3-1: config 0 descriptor??
[  945.739581][T10313] raw-gadget gadget: fail, usb_ep_enable returned -22
[  945.798962][   T17] usb 3-1: invalid MIDI in EP 0
[  945.804368][   T17] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  945.967421][   T17] usb 3-1: USB disconnect, device number 56
21:36:16 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:16 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}})
write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00-\x00', 0x1, "070004"}, "ccbfc12abc282c27820fd9118600820e000600110000000094ce7f17e89fb5f1112b33df4c366b67856c210a24c3df6373d0ca47aac2885da778edbd1ee5bde967a600ca0e2ba1e34aebb68aa9431063000000000000000000010000"}}}}, 0x8a)

21:36:16 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:16 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:16 executing program 4:
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:16 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:16 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:16 executing program 4:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:16 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:16 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:16 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:16 executing program 4:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

[  946.998803][ T3851] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  947.248639][ T3851] usb 3-1: Using ep0 maxpacket: 8
[  947.378974][ T3851] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  947.387132][ T3851] usb 3-1: config 0 has no interface number 0
[  947.394795][ T3851] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  947.406421][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  947.416580][ T3851] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  947.427175][ T3851] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  947.436303][ T3851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.452209][ T3851] usb 3-1: config 0 descriptor??
[  947.469485][T10370] raw-gadget gadget: fail, usb_ep_enable returned -22
[  947.554593][ T3851] usb 3-1: invalid MIDI in EP 0
[  947.560106][ T3851] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  947.707283][ T9523] usb 3-1: USB disconnect, device number 57
21:36:18 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c0900000905011208070000000905"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:18 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:18 executing program 1:
creat(&(0x7f0000000200)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendfile(r2, r0, 0x0, 0x8800001)

21:36:18 executing program 4:
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:18 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:36:18 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:18 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:18 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:36:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:18 executing program 1:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

21:36:18 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x0, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  948.578542][   T12] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  948.828507][   T12] usb 3-1: Using ep0 maxpacket: 8
[  948.949519][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  948.957508][   T12] usb 3-1: config 0 has no interface number 0
[  948.963879][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  948.975032][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  948.985131][   T12] usb 3-1: config 0 interface 2 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  948.995734][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  949.005029][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.019082][   T12] usb 3-1: config 0 descriptor??
[  949.046002][T10416] raw-gadget gadget: fail, usb_ep_enable returned -22
[  949.108952][   T12] usb 3-1: invalid MIDI in EP 0
[  949.114381][   T12] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  949.269098][   T12] usb 3-1: USB disconnect, device number 58
21:36:19 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:19 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x0, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:19 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:19 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

21:36:19 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:20 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:20 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:20 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x0, 0x8, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:20 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  950.208565][   T12] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  950.461839][   T12] usb 3-1: Using ep0 maxpacket: 8
[  950.588568][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  950.596646][   T12] usb 3-1: config 0 has no interface number 0
[  950.603182][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  950.614230][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  950.625086][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  950.634952][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  950.644786][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  950.653915][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.663468][   T12] usb 3-1: config 0 descriptor??
[  950.689231][T10462] raw-gadget gadget: fail, usb_ep_enable returned -22
[  950.749725][   T12] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  950.918538][ T9523] usb 3-1: USB disconnect, device number 59
21:36:21 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:21 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:21 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:21 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f000000c900)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r3, 0x5427, 0x0)
dup2(r3, r1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8000, @local, 0x8}, 0x1c)
shutdown(r0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x0, [0x20, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x38c6]}, 0x5c)
listen(r0, 0x100000000000012)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc)

21:36:21 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:21 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:21 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:21 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:21 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:21 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

21:36:21 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:21 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x0, &(0x7f0000019040)=""/102400, &(0x7f0000000000)=0x19000)

[  951.888497][ T3828] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  951.939621][ T9523] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  952.138389][ T3828] usb 3-1: Using ep0 maxpacket: 8
[  952.178348][ T9523] usb 2-1: Using ep0 maxpacket: 8
[  952.278512][ T3828] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  952.286628][ T3828] usb 3-1: config 0 has no interface number 0
[  952.294541][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  952.306236][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  952.308836][ T9523] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  952.317578][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  952.330879][ T9523] usb 2-1: config 0 has no interface number 0
[  952.335323][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  952.344665][ T9523] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  952.351319][ T3828] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  952.367343][ T9523] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  952.371239][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.386060][ T9523] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  952.397883][ T3828] usb 3-1: config 0 descriptor??
[  952.398215][ T9523] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  952.419725][T10502] raw-gadget gadget: fail, usb_ep_enable returned -22
[  952.419749][ T9523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.442784][ T9523] usb 2-1: config 0 descriptor??
[  952.459713][T10514] raw-gadget gadget: fail, usb_ep_enable returned -22
[  952.466965][T10514] raw-gadget gadget: fail, usb_ep_enable returned -22
[  952.479587][ T3828] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  952.833913][ T3828] usb 3-1: USB disconnect, device number 60
[  952.835600][   T17] usb 2-1: USB disconnect, device number 7
21:36:23 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:23 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:23 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:23 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))

21:36:23 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:23 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

[  953.373444][T10579] new mount options do not match the existing superblock, will be ignored
21:36:23 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))

21:36:23 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:23 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:23 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))

[  953.517583][T10589] new mount options do not match the existing superblock, will be ignored
21:36:23 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:23 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

[  953.711485][T10602] new mount options do not match the existing superblock, will be ignored
[  953.788312][ T3828] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  953.818266][ T3851] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  954.038331][ T3828] usb 3-1: Using ep0 maxpacket: 8
[  954.088250][ T3851] usb 2-1: Using ep0 maxpacket: 8
[  954.168643][ T3828] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  954.176637][ T3828] usb 3-1: config 0 has no interface number 0
[  954.185727][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  954.196737][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  954.206745][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  954.216544][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  954.226451][ T3851] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  954.234660][ T3828] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  954.243866][ T3851] usb 2-1: config 0 has no interface number 0
[  954.250081][ T3851] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  954.261234][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.270031][ T3851] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  954.280526][ T3828] usb 3-1: config 0 descriptor??
[  954.285639][ T3851] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  954.296142][ T3851] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  954.306614][T10583] raw-gadget gadget: fail, usb_ep_enable returned -22
[  954.313911][ T3851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.327609][ T3851] usb 2-1: config 0 descriptor??
[  954.359727][T10592] raw-gadget gadget: fail, usb_ep_enable returned -22
[  954.366983][T10592] raw-gadget gadget: fail, usb_ep_enable returned -22
[  954.383674][ T3828] snd-usb-audio: probe of 3-1:0.2 failed with error -12
[  954.611743][ T9523] usb 3-1: USB disconnect, device number 61
[  954.692865][   T17] usb 2-1: USB disconnect, device number 8
21:36:25 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:25 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, 0x0)

21:36:25 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

21:36:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:25 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:25 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, 0x0)

21:36:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  955.183068][T10661] new mount options do not match the existing superblock, will be ignored
21:36:25 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

21:36:25 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:25 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
r0 = socket(0x15, 0x5, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019040)=""/102400, 0x0)

21:36:25 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

21:36:25 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  955.353878][T10673] new mount options do not match the existing superblock, will be ignored
[  955.476076][T10683] new mount options do not match the existing superblock, will be ignored
[  955.569800][ T3851] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  955.628539][ T3828] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  955.838161][ T3851] usb 3-1: Using ep0 maxpacket: 8
[  955.888499][ T3828] usb 2-1: Using ep0 maxpacket: 8
[  955.988543][ T3851] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  955.996703][ T3851] usb 3-1: config 0 has no interface number 0
[  956.004388][ T3851] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  956.016395][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  956.027505][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  956.038261][ T3828] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  956.046289][ T3828] usb 2-1: config 0 has no interface number 0
[  956.053500][ T3851] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  956.063151][ T3828] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  956.074754][ T3851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.084889][ T3851] usb 3-1: config 0 descriptor??
[  956.095546][ T3828] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  956.107293][ T3828] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  956.117869][ T3828] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  956.128526][T10664] raw-gadget gadget: fail, usb_ep_enable returned -22
[  956.135858][T10664] raw-gadget gadget: fail, usb_ep_enable returned -22
[  956.143740][ T3828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.153279][ T3828] usb 2-1: config 0 descriptor??
[  956.179704][T10672] raw-gadget gadget: fail, usb_ep_enable returned -22
[  956.195262][T10672] raw-gadget gadget: fail, usb_ep_enable returned -22
[  956.373484][ T3828] usb 3-1: USB disconnect, device number 62
[  956.656345][   T17] usb 2-1: USB disconnect, device number 9
21:36:27 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:27 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:27 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
dup(r0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

21:36:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:27 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:27 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

[  957.212944][T10763] new mount options do not match the existing superblock, will be ignored
21:36:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:27 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
dup(r0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

21:36:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:27 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
dup(r0)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7fff)

[  957.360672][T10781] new mount options do not match the existing superblock, will be ignored
21:36:27 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:27 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

[  957.425995][T10785] new mount options do not match the existing superblock, will be ignored
[  957.468149][ T3851] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  957.493959][T10789] new mount options do not match the existing superblock, will be ignored
[  957.568123][   T12] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  957.608203][   T17] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  957.738224][ T3851] usb 6-1: Using ep0 maxpacket: 8
[  957.828029][   T12] usb 2-1: Using ep0 maxpacket: 8
[  957.848041][   T17] usb 3-1: Using ep0 maxpacket: 8
[  957.868242][ T3851] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  957.876241][ T3851] usb 6-1: config 0 has no interface number 0
[  957.883803][ T3851] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  957.895600][ T3851] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  957.906307][ T3851] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  957.916817][ T3851] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  957.926731][ T3851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.936282][ T3851] usb 6-1: config 0 descriptor??
[  957.958149][   T12] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  957.959447][T10762] raw-gadget gadget: fail, usb_ep_enable returned -22
[  957.966128][   T12] usb 2-1: config 0 has no interface number 0
[  957.973220][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  957.987565][   T17] usb 3-1: config 0 has no interface number 0
[  957.994757][T10762] raw-gadget gadget: fail, usb_ep_enable returned -22
[  958.002097][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  958.003528][   T12] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  958.014091][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  958.034889][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  958.035029][   T12] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  958.045256][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  958.064699][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.068297][   T12] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  958.087805][   T17] usb 3-1: config 0 descriptor??
[  958.097516][   T12] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  958.108946][T10771] raw-gadget gadget: fail, usb_ep_enable returned -22
[  958.116238][T10771] raw-gadget gadget: fail, usb_ep_enable returned -22
[  958.141249][   T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.162581][   T12] usb 2-1: config 0 descriptor??
[  958.199557][T10775] raw-gadget gadget: fail, usb_ep_enable returned -22
[  958.206829][T10775] raw-gadget gadget: fail, usb_ep_enable returned -22
[  958.383768][   T17] usb 3-1: USB disconnect, device number 63
[  958.532765][ T3851] usb 6-1: USB disconnect, device number 26
[  958.742102][   T12] usb 2-1: USB disconnect, device number 10
21:36:29 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:29 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:29 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:29 executing program 5:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:29 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  959.298942][   T17] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  959.332785][T10888] new mount options do not match the existing superblock, will be ignored
21:36:29 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x7fff)

21:36:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:29 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7fff)

[  959.524923][T10902] new mount options do not match the existing superblock, will be ignored
[  959.546626][   T17] usb 3-1: Using ep0 maxpacket: 8
21:36:29 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  959.622738][T10908] new mount options do not match the existing superblock, will be ignored
[  959.668025][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  959.679786][   T17] usb 3-1: config 0 has no interface number 0
[  959.686884][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  959.701212][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  959.712819][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  959.718140][   T12] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  959.724593][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  959.740230][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.763546][   T17] usb 3-1: config 0 descriptor??
[  959.788827][T10880] raw-gadget gadget: fail, usb_ep_enable returned -22
[  959.796593][T10880] raw-gadget gadget: fail, usb_ep_enable returned -22
[  960.008062][   T12] usb 2-1: Using ep0 maxpacket: 8
[  960.022273][   T17] usb 3-1: USB disconnect, device number 64
[  960.142045][   T12] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  960.150669][   T12] usb 2-1: config 0 has no interface number 0
[  960.167295][   T12] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  960.180047][   T12] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  960.190261][   T12] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  960.200377][   T12] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  960.210595][   T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.220866][   T12] usb 2-1: config 0 descriptor??
[  960.244700][T10893] raw-gadget gadget: fail, usb_ep_enable returned -22
[  960.252990][T10893] raw-gadget gadget: fail, usb_ep_enable returned -22
[  960.573107][ T2476] usb 2-1: USB disconnect, device number 11
21:36:30 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0)
dup2(r0, r1)

21:36:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:30 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7fff)

21:36:30 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:30 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)

[  960.707527][T10990] new mount options do not match the existing superblock, will be ignored
[  960.987886][   T17] usb 6-1: new high-speed USB device number 27 using dummy_hcd
21:36:31 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, r1)

21:36:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:31 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7fff)

[  961.137960][   T12] usb 3-1: new high-speed USB device number 65 using dummy_hcd
21:36:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:31 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff)

[  961.190375][T11001] new mount options do not match the existing superblock, will be ignored
[  961.228058][   T17] usb 6-1: Using ep0 maxpacket: 8
21:36:31 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff)

21:36:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  961.266359][T11007] new mount options do not match the existing superblock, will be ignored
[  961.339130][T11012] new mount options do not match the existing superblock, will be ignored
[  961.348427][   T17] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  961.361685][   T17] usb 6-1: config 0 has no interface number 0
[  961.374818][   T17] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  961.393936][   T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  961.405143][   T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  961.407934][   T12] usb 3-1: Using ep0 maxpacket: 8
[  961.415033][   T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  961.429162][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.444978][   T17] usb 6-1: config 0 descriptor??
[  961.465531][ T2476] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  961.474539][T10992] raw-gadget gadget: fail, usb_ep_enable returned -22
[  961.485415][T10992] raw-gadget gadget: fail, usb_ep_enable returned -22
[  961.569168][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  961.577168][   T12] usb 3-1: config 0 has no interface number 0
[  961.592564][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  961.617718][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  961.660742][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  961.687411][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  961.718151][ T2476] usb 2-1: Using ep0 maxpacket: 8
[  961.722365][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.736867][   T12] usb 3-1: config 0 descriptor??
[  961.768585][T10996] raw-gadget gadget: fail, usb_ep_enable returned -22
[  961.775726][T10996] raw-gadget gadget: fail, usb_ep_enable returned -22
[  961.836317][ T3837] usb 6-1: USB disconnect, device number 27
[  961.843535][ T2476] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  961.867817][ T2476] usb 2-1: config 0 has no interface number 0
[  961.875077][ T2476] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  961.934172][ T2476] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  961.993801][ T2476] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  962.025272][   T12] usb 3-1: USB disconnect, device number 65
[  962.049886][ T2476] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  962.111680][ T2476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.133361][ T2476] usb 2-1: config 0 descriptor??
[  962.169382][T11003] raw-gadget gadget: fail, usb_ep_enable returned -22
[  962.176631][T11003] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:32 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0)
dup2(r0, r1)

[  962.506011][   T12] usb 2-1: USB disconnect, device number 12
21:36:32 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff)

21:36:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:32 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:32 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  962.612944][T11122] new mount options do not match the existing superblock, will be ignored
[  962.867794][ T3837] usb 6-1: new high-speed USB device number 28 using dummy_hcd
21:36:33 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:33 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x0)

21:36:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  963.027765][ T3851] usb 3-1: new high-speed USB device number 66 using dummy_hcd
21:36:33 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x0)

21:36:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  963.087847][T11130] new mount options do not match the existing superblock, will be ignored
[  963.107804][ T3837] usb 6-1: Using ep0 maxpacket: 8
21:36:33 executing program 4:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x0)

[  963.165974][T11137] new mount options do not match the existing superblock, will be ignored
21:36:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  963.229017][ T3837] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  963.237063][ T3837] usb 6-1: config 0 has no interface number 0
[  963.248106][ T3837] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  963.256105][T11142] new mount options do not match the existing superblock, will be ignored
[  963.260973][ T3837] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  963.278974][ T3851] usb 3-1: Using ep0 maxpacket: 8
[  963.284883][ T3837] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  963.298275][ T3837] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  963.307584][ T3837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.330165][ T3837] usb 6-1: config 0 descriptor??
[  963.349143][T11123] raw-gadget gadget: fail, usb_ep_enable returned -22
[  963.356388][T11123] raw-gadget gadget: fail, usb_ep_enable returned -22
[  963.397876][ T3851] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  963.405947][ T3851] usb 3-1: config 0 has no interface number 0
[  963.422220][ T3851] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  963.442445][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  963.444321][   T17] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  963.453937][ T3851] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  963.470828][ T3851] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  963.480736][ T3851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.508318][ T3851] usb 3-1: config 0 descriptor??
[  963.528658][T11127] raw-gadget gadget: fail, usb_ep_enable returned -22
[  963.535962][T11127] raw-gadget gadget: fail, usb_ep_enable returned -22
[  963.737864][   T17] usb 2-1: Using ep0 maxpacket: 8
[  963.752556][ T3851] usb 6-1: USB disconnect, device number 28
[  963.795642][ T3837] usb 3-1: USB disconnect, device number 66
[  963.868650][   T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  963.880603][   T17] usb 2-1: config 0 has no interface number 0
[  963.903629][   T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  963.949859][   T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  963.977174][   T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  964.008105][   T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  964.017137][   T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.031543][   T17] usb 2-1: config 0 descriptor??
[  964.049196][T11136] raw-gadget gadget: fail, usb_ep_enable returned -22
[  964.056482][T11136] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:34 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0)
dup2(r0, r1)

21:36:34 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:34 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  964.308280][ T3837] usb 2-1: USB disconnect, device number 13
21:36:34 executing program 5:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  964.647713][   T17] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  964.668013][ T8613] usb 3-1: new high-speed USB device number 67 using dummy_hcd
21:36:35 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  964.917680][   T17] usb 5-1: Using ep0 maxpacket: 8
[  964.940523][ T8613] usb 3-1: Using ep0 maxpacket: 8
21:36:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:35 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  965.066594][   T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  965.077218][   T17] usb 5-1: config 0 has no interface number 0
[  965.085525][ T8613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  965.094523][ T8613] usb 3-1: config 0 has no interface number 0
[  965.108811][   T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  965.121022][ T8613] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  965.133708][   T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  965.145584][ T8613] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  965.157043][   T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  965.168215][ T8613] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  965.180994][   T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  965.191020][ T8613] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  965.201032][ T9523] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  965.208951][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.222942][ T8613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.233227][   T17] usb 5-1: config 0 descriptor??
[  965.243468][ T8613] usb 3-1: config 0 descriptor??
[  965.258442][T11235] raw-gadget gadget: fail, usb_ep_enable returned -22
[  965.265720][T11235] raw-gadget gadget: fail, usb_ep_enable returned -22
[  965.290853][T11244] raw-gadget gadget: fail, usb_ep_enable returned -22
[  965.299244][T11244] raw-gadget gadget: fail, usb_ep_enable returned -22
[  965.467853][ T9523] usb 2-1: Using ep0 maxpacket: 8
[  965.537471][ T8613] usb 3-1: USB disconnect, device number 67
[  965.588256][ T9523] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  965.596263][ T9523] usb 2-1: config 0 has no interface number 0
[  965.630683][ T9523] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  965.664415][ T9523] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  965.691497][ T9523] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  965.709083][ T9523] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  965.761936][ T9523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.797677][   T17] usb 5-1: USB disconnect, device number 11
[  965.812006][ T9523] usb 2-1: config 0 descriptor??
[  965.859811][T11258] raw-gadget gadget: fail, usb_ep_enable returned -22
[  965.867085][T11258] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:36 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r0, r1)

21:36:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:36 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  966.140357][   T17] usb 2-1: USB disconnect, device number 14
21:36:36 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:36 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  966.557619][ T3837] usb 3-1: new high-speed USB device number 68 using dummy_hcd
21:36:36 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  966.617679][ T3851] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  966.628248][   T12] usb 5-1: new high-speed USB device number 12 using dummy_hcd
21:36:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  966.817554][ T3837] usb 3-1: Using ep0 maxpacket: 8
[  966.867739][ T3851] usb 6-1: Using ep0 maxpacket: 8
[  966.878884][   T12] usb 5-1: Using ep0 maxpacket: 8
21:36:37 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  966.937712][ T3837] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  966.945917][ T3837] usb 3-1: config 0 has no interface number 0
[  966.954956][ T3837] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  966.967460][ T3837] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  966.968221][ T3828] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  966.987926][ T3851] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  966.995919][ T3851] usb 6-1: config 0 has no interface number 0
[  967.002268][   T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  967.014425][ T3837] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  967.025815][   T12] usb 5-1: config 0 has no interface number 0
[  967.033258][ T3851] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  967.044974][   T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  967.057070][ T3837] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  967.067191][ T3851] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  967.078209][   T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  967.089321][ T3837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.099290][ T3837] usb 3-1: config 0 descriptor??
[  967.104412][ T3851] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  967.118315][T11367] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.125580][T11367] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.134527][   T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  967.145287][ T3851] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  967.154976][   T12] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  967.171000][ T3851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.179829][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.193540][ T3851] usb 6-1: config 0 descriptor??
[  967.215526][   T12] usb 5-1: config 0 descriptor??
[  967.268473][T11381] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.275753][T11381] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.284021][T11377] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.291452][ T3828] usb 2-1: Using ep0 maxpacket: 8
[  967.300047][T11377] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.408305][ T3828] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  967.417310][ T3828] usb 2-1: config 0 has no interface number 0
[  967.439436][ T3828] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  967.459025][ T3828] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  967.507047][ T3828] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  967.631033][ T3828] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  967.707258][ T3828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.749073][ T3828] usb 2-1: config 0 descriptor??
[  967.762255][   T12] usb 3-1: USB disconnect, device number 68
[  967.769735][T11387] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.776986][T11387] raw-gadget gadget: fail, usb_ep_enable returned -22
[  967.830668][ T8613] usb 6-1: USB disconnect, device number 29
[  967.864179][ T3837] usb 5-1: USB disconnect, device number 12
21:36:38 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r0, r1)

21:36:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:38 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  968.080249][ T3828] usb 2-1: USB disconnect, device number 15
[  968.387551][   T12] usb 3-1: new high-speed USB device number 69 using dummy_hcd
21:36:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:38 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:38 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:38 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x7f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8002}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  968.647510][   T12] usb 3-1: Using ep0 maxpacket: 8
21:36:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8003}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:38 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8100}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  968.767777][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  968.785705][   T12] usb 3-1: config 0 has no interface number 0
[  968.794128][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
21:36:39 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8101}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  968.813673][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  968.825111][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  968.844848][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  968.855660][ T3837] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  968.870857][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.884354][   T12] usb 3-1: config 0 descriptor??
[  968.907597][ T3828] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  968.918657][T11490] raw-gadget gadget: fail, usb_ep_enable returned -22
[  968.925944][T11490] raw-gadget gadget: fail, usb_ep_enable returned -22
[  969.077877][T11464] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  969.128257][ T3837] usb 6-1: Using ep0 maxpacket: 8
[  969.148163][ T3828] usb 5-1: Using ep0 maxpacket: 8
[  969.207927][ T8613] usb 3-1: USB disconnect, device number 69
[  969.250882][ T3837] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  969.259742][ T3837] usb 6-1: config 0 has no interface number 0
[  969.266476][ T3837] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  969.293686][ T3828] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  969.305091][ T3828] usb 5-1: config 0 has no interface number 0
[  969.312711][ T3828] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  969.324982][ T3837] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  969.335873][ T3828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  969.346483][ T3837] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  969.356863][T11464] usb 2-1: Using ep0 maxpacket: 8
[  969.362035][ T3828] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  969.373010][ T3837] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  969.383127][ T3837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.391776][ T3828] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  969.402938][ T3828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.411880][ T3837] usb 6-1: config 0 descriptor??
[  969.426576][ T3828] usb 5-1: config 0 descriptor??
[  969.433042][T11531] raw-gadget gadget: fail, usb_ep_enable returned -22
[  969.458777][T11531] raw-gadget gadget: fail, usb_ep_enable returned -22
[  969.478356][T11536] raw-gadget gadget: fail, usb_ep_enable returned -22
[  969.485607][T11536] raw-gadget gadget: fail, usb_ep_enable returned -22
[  969.494001][T11464] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  969.504370][T11464] usb 2-1: config 0 has no interface number 0
[  969.515589][T11464] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  969.530641][T11464] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  969.563343][T11464] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  969.578858][T11464] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  969.588640][T11464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.618775][T11464] usb 2-1: config 0 descriptor??
[  969.638839][T11540] raw-gadget gadget: fail, usb_ep_enable returned -22
[  969.646106][T11540] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:39 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
dup2(r0, r1)

21:36:39 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8102}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:39 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

[  969.882026][T11464] usb 6-1: USB disconnect, device number 30
21:36:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8103}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  970.164964][ T8613] usb 2-1: USB disconnect, device number 16
[  970.171342][ T9523] usb 5-1: USB disconnect, device number 13
[  970.387592][ T3828] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  970.627380][ T3828] usb 3-1: Using ep0 maxpacket: 8
21:36:40 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8200}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:40 executing program 1:
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:40 executing program 4:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:36:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8201}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  970.747611][ T3828] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  970.755759][ T3828] usb 3-1: config 0 has no interface number 0
[  970.799557][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  970.823510][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
21:36:41 executing program 1:
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:41 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8202}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  970.862994][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  970.891422][ T3828] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  970.905817][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.917057][ T3828] usb 3-1: config 0 descriptor??
21:36:41 executing program 1:
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  970.958392][T11646] raw-gadget gadget: fail, usb_ep_enable returned -22
[  970.965669][T11646] raw-gadget gadget: fail, usb_ep_enable returned -22
[  971.207398][ T3837] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  971.268068][ T8613] usb 3-1: USB disconnect, device number 70
[  971.457498][ T3837] usb 6-1: Using ep0 maxpacket: 8
[  971.577387][ T3837] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  971.585480][ T3837] usb 6-1: config 0 has no interface number 0
[  971.593015][ T3837] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  971.604872][ T3837] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  971.615533][ T3837] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  971.627012][ T3837] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  971.636616][ T3837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.649213][ T3837] usb 6-1: config 0 descriptor??
[  971.668883][T11701] raw-gadget gadget: fail, usb_ep_enable returned -22
[  971.676223][T11701] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:41 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:41 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8203}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:41 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:41 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  972.043977][ T3837] usb 6-1: USB disconnect, device number 31
[  972.107413][ T8613] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  972.187338][ T9523] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  972.377291][ T8613] usb 5-1: Using ep0 maxpacket: 8
[  972.438394][ T9523] usb 3-1: Using ep0 maxpacket: 8
[  972.507971][ T8613] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  972.516161][ T8613] usb 5-1: config 0 has no interface number 0
[  972.522849][ T8613] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  972.534988][ T8613] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  972.545491][ T8613] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  972.555760][ T8613] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  972.565060][ T8613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.573456][ T9523] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  972.582380][ T9523] usb 3-1: config 0 has no interface number 0
[  972.590134][ T8613] usb 5-1: config 0 descriptor??
[  972.595819][ T9523] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
21:36:42 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:42 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

21:36:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8300}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:42 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0)

[  972.612875][T11769] raw-gadget gadget: fail, usb_ep_enable returned -22
[  972.620600][ T9523] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  972.642713][T11769] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8301}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  972.670840][ T9523] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  972.707590][ T9523] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  972.780483][ T9523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.815992][ T9523] usb 3-1: config 0 descriptor??
21:36:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8302}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  972.838154][T11775] raw-gadget gadget: fail, usb_ep_enable returned -22
[  972.851589][T11775] raw-gadget gadget: fail, usb_ep_enable returned -22
[  973.067307][   T17] usb 6-1: new high-speed USB device number 32 using dummy_hcd
21:36:43 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8303}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  973.111390][ T9523] usb 3-1: USB disconnect, device number 71
21:36:43 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0)

[  973.347374][   T17] usb 6-1: Using ep0 maxpacket: 8
[  973.369111][ T8613] usb 5-1: USB disconnect, device number 14
[  973.467940][   T17] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  973.476161][   T17] usb 6-1: config 0 has no interface number 0
[  973.520450][   T17] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  973.533615][   T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  973.545320][   T17] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  973.555976][   T17] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  973.566001][   T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.581453][   T17] usb 6-1: config 0 descriptor??
[  973.603131][T11806] raw-gadget gadget: fail, usb_ep_enable returned -22
[  973.612536][T11806] raw-gadget gadget: fail, usb_ep_enable returned -22
21:36:44 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:44 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:44 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

[  973.849873][ T3837] usb 6-1: USB disconnect, device number 32
21:36:44 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  974.337500][   T17] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  974.337675][ T3828] usb 3-1: new high-speed USB device number 72 using dummy_hcd
21:36:44 executing program 5:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:44 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80103, 0x0)

21:36:44 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8401}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:44 executing program 5:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:44 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8402}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:44 executing program 5:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:44 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8403}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  974.577277][   T17] usb 5-1: Using ep0 maxpacket: 8
[  974.617365][ T3828] usb 3-1: Using ep0 maxpacket: 8
21:36:44 executing program 5:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  974.697532][   T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  974.717642][   T17] usb 5-1: config 0 has no interface number 0
[  974.742924][   T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  974.747680][ T3828] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  974.763487][   T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  974.775526][   T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  974.779513][ T3828] usb 3-1: config 0 has no interface number 0
[  974.791786][   T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  974.802046][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  974.802638][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.814231][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  974.833395][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  974.835139][   T17] usb 5-1: config 0 descriptor??
[  974.851742][ T3828] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  974.861625][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.875710][ T3828] usb 3-1: config 0 descriptor??
[  974.877953][T11924] raw-gadget gadget: fail, usb_ep_enable returned -22
[  974.897986][T11919] raw-gadget gadget: fail, usb_ep_enable returned -22
[  974.902474][T11924] raw-gadget gadget: fail, usb_ep_enable returned -22
[  974.905243][T11919] raw-gadget gadget: fail, usb_ep_enable returned -22
[  975.188924][   T17] usb 3-1: USB disconnect, device number 72
[  975.446562][ T3828] usb 5-1: USB disconnect, device number 15
21:36:46 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8500}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:46 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)

21:36:46 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

21:36:46 executing program 5:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:46 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8501}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8502}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8503}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8600}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8601}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8602}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  976.247148][ T3828] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  976.317104][   T12] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  976.488040][ T3828] usb 3-1: Using ep0 maxpacket: 8
[  976.557181][   T12] usb 5-1: Using ep0 maxpacket: 8
[  976.617484][ T3828] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  976.629537][ T3828] usb 3-1: config 0 has no interface number 0
[  976.641912][ T3828] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  976.656885][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  976.668097][ T3828] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  976.678889][ T3828] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  976.688527][   T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  976.697241][ T3828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.705696][   T12] usb 5-1: config 0 has no interface number 0
[  976.712584][   T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  976.724528][   T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  976.737428][ T3828] usb 3-1: config 0 descriptor??
[  976.742900][   T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  976.757956][T12014] raw-gadget gadget: fail, usb_ep_enable returned -22
[  976.762782][   T12] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  976.765206][T12014] raw-gadget gadget: fail, usb_ep_enable returned -22
[  976.792595][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.815566][   T12] usb 5-1: config 0 descriptor??
[  976.847977][T12021] raw-gadget gadget: fail, usb_ep_enable returned -22
[  976.855269][T12021] raw-gadget gadget: fail, usb_ep_enable returned -22
[  977.023577][   T12] usb 3-1: USB disconnect, device number 73
[  977.298522][ T8613] usb 5-1: USB disconnect, device number 16
21:36:47 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, 0xffffffffffffffff)

21:36:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8603}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:47 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)

21:36:47 executing program 5:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:47 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

21:36:48 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)

21:36:48 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

21:36:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8700}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8701}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8702}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8703}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8800}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  978.147049][ T8613] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  978.207102][   T17] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  978.387263][ T8613] usb 3-1: Using ep0 maxpacket: 8
[  978.457089][   T17] usb 5-1: Using ep0 maxpacket: 8
[  978.517177][ T8613] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  978.525326][ T8613] usb 3-1: config 0 has no interface number 0
[  978.531825][ T8613] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  978.543529][ T8613] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  978.555166][ T8613] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  978.565712][ T8613] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  978.575252][ T8613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.584019][   T17] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  978.592609][   T17] usb 5-1: config 0 has no interface number 0
[  978.604754][ T8613] usb 3-1: config 0 descriptor??
[  978.610301][   T17] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  978.625757][   T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  978.636928][T12118] raw-gadget gadget: fail, usb_ep_enable returned -22
[  978.644186][T12118] raw-gadget gadget: fail, usb_ep_enable returned -22
[  978.653152][   T17] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  978.665131][   T17] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  978.677025][   T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.695867][   T17] usb 5-1: config 0 descriptor??
[  978.729723][T12124] raw-gadget gadget: fail, usb_ep_enable returned -22
[  978.748259][T12124] raw-gadget gadget: fail, usb_ep_enable returned -22
[  978.887352][   T12] usb 3-1: USB disconnect, device number 74
[  979.011215][ T3837] usb 5-1: USB disconnect, device number 17
21:36:49 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, 0xffffffffffffffff)

21:36:49 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8801}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:49 executing program 1:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)

21:36:49 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, 0x0}, 0x0)

21:36:49 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8802}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8803}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8900}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8901}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:50 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8902}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:50 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8903}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  979.946890][ T3837] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  979.956932][ T8613] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  980.056912][   T12] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  980.193719][ T3837] usb 5-1: Using ep0 maxpacket: 8
[  980.257182][ T8613] usb 6-1: device descriptor read/64, error 18
[  980.296898][   T12] usb 3-1: Using ep0 maxpacket: 8
[  980.317188][ T3837] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  980.325193][ T3837] usb 5-1: config 0 has no interface number 0
[  980.331641][ T3837] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  980.343353][ T3837] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  980.355090][ T3837] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  980.365400][ T3837] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  980.374504][ T3837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.391837][ T3837] usb 5-1: config 0 descriptor??
[  980.417726][T12211] raw-gadget gadget: fail, usb_ep_enable returned -22
[  980.425050][   T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  980.434912][T12211] raw-gadget gadget: fail, usb_ep_enable returned -22
[  980.442283][   T12] usb 3-1: config 0 has no interface number 0
[  980.448904][   T12] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  980.464976][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  980.475221][   T12] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  980.485263][   T12] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  980.495656][   T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.526474][   T12] usb 3-1: config 0 descriptor??
[  980.557868][T12219] raw-gadget gadget: fail, usb_ep_enable returned -22
[  980.565148][T12219] raw-gadget gadget: fail, usb_ep_enable returned -22
[  980.686924][ T8613] usb 6-1: device descriptor read/64, error 18
[  980.707938][   T12] usb 5-1: USB disconnect, device number 18
[  980.830058][ T3837] usb 3-1: USB disconnect, device number 75
[  980.961451][ T8613] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  981.266838][ T8613] usb 6-1: device descriptor read/64, error 18
21:36:51 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, 0xffffffffffffffff)

[  981.676769][ T8613] usb 6-1: device descriptor read/64, error 18
[  981.696855][ T3837] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  981.797954][ T8613] usb usb6-port1: attempt power cycle
[  981.947099][ T3837] usb 3-1: Using ep0 maxpacket: 8
[  982.087163][ T3837] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  982.095267][ T3837] usb 3-1: config 0 has no interface number 0
[  982.101699][ T3837] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  982.112981][ T3837] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  982.123173][ T3837] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  982.133155][ T3837] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  982.142325][ T3837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.155119][ T3837] usb 3-1: config 0 descriptor??
[  982.177564][T12295] raw-gadget gadget: fail, usb_ep_enable returned -22
[  982.185425][T12295] raw-gadget gadget: fail, usb_ep_enable returned -22
[  982.442645][   T17] usb 3-1: USB disconnect, device number 76
[  982.506753][ T8613] usb 6-1: new high-speed USB device number 35 using dummy_hcd
21:36:52 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:52 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8a00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:52 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:52 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)

21:36:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8a01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  982.686800][ T8613] usb 6-1: device descriptor read/8, error -71
21:36:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8a02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8a03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8b00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8b01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8b02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  982.906843][ T8613] usb 6-1: device descriptor read/8, error -71
21:36:53 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8b03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  982.972616][ T3837] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  982.987077][   T12] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  983.011197][   T17] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  983.236701][ T3837] usb 4-1: Using ep0 maxpacket: 8
[  983.241886][   T12] usb 5-1: Using ep0 maxpacket: 8
[  983.258683][   T17] usb 2-1: Using ep0 maxpacket: 8
[  983.376923][ T3837] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  983.377236][   T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  983.385074][   T12] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  983.396695][ T8613] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  983.402013][ T3837] usb 4-1: config 0 has no interface number 0
[  983.415623][   T12] usb 5-1: config 0 has no interface number 0
[  983.419241][   T17] usb 2-1: config 0 has no interface number 0
[  983.423171][ T3837] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  983.433954][   T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  983.440187][   T12] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  983.460944][   T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  983.462531][ T3837] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  983.476363][   T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  983.482312][   T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  983.499652][   T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  983.502191][ T3837] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  983.515462][   T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.521794][   T12] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  983.539832][ T3837] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  983.549261][   T12] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  983.554840][   T17] usb 2-1: config 0 descriptor??
[  983.562540][ T3837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.586635][   T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.599098][T12347] raw-gadget gadget: fail, usb_ep_enable returned -22
[  983.603227][   T12] usb 5-1: config 0 descriptor??
[  983.606304][T12347] raw-gadget gadget: fail, usb_ep_enable returned -22
[  983.614509][ T3837] usb 4-1: config 0 descriptor??
[  983.625852][ T8613] usb 6-1: device descriptor read/8, error -61
[  983.657453][T12343] raw-gadget gadget: fail, usb_ep_enable returned -22
[  983.667380][T12346] raw-gadget gadget: fail, usb_ep_enable returned -22
[  983.674698][T12346] raw-gadget gadget: fail, usb_ep_enable returned -22
[  983.682331][T12343] raw-gadget gadget: fail, usb_ep_enable returned -22
[  983.897362][ T8613] usb 6-1: device descriptor read/8, error -61
[  983.950981][   T17] usb 5-1: USB disconnect, device number 19
[  984.016901][ T8613] usb usb6-port1: unable to enumerate USB device
[  984.154909][ T8613] usb 2-1: USB disconnect, device number 17
[  984.403456][ T3837] usb 4-1: USB disconnect, device number 8
21:36:55 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:55 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(r0, 0xffffffffffffffff)

21:36:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8c00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:55 executing program 4:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:55 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:55 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:55 executing program 4:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8c01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8c02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:56 executing program 4:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:56 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8c03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:56 executing program 4:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  986.076359][   T12] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  986.076439][   T17] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  986.096584][ T8613] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  986.216427][ T3837] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  986.326316][   T17] usb 3-1: Using ep0 maxpacket: 8
[  986.336479][   T12] usb 4-1: Using ep0 maxpacket: 8
[  986.336605][ T8613] usb 2-1: Using ep0 maxpacket: 8
[  986.446408][   T17] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  986.454476][   T17] usb 3-1: config 0 has no interface number 0
[  986.465433][   T17] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  986.466466][   T12] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  986.476614][ T8613] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  986.487531][   T12] usb 4-1: config 0 has no interface number 0
[  986.500171][   T12] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  986.501177][ T8613] usb 2-1: config 0 has no interface number 0
[  986.513078][ T3837] usb 6-1: device descriptor read/64, error 18
[  986.523264][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  986.524041][   T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  986.535535][   T17] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  986.557313][   T12] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  986.567946][ T8613] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  986.568164][   T12] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  986.588444][   T12] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.592359][ T8613] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  986.606773][   T12] usb 4-1: config 0 descriptor??
[  986.616336][   T17] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  986.625371][   T17] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.637242][T12474] raw-gadget gadget: fail, usb_ep_enable returned -22
[  986.639288][ T8613] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  986.644466][T12474] raw-gadget gadget: fail, usb_ep_enable returned -22
[  986.663688][ T8613] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  986.673345][   T17] usb 3-1: config 0 descriptor??
[  986.690337][ T8613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.707061][T12473] raw-gadget gadget: fail, usb_ep_enable returned -22
[  986.714258][T12473] raw-gadget gadget: fail, usb_ep_enable returned -22
[  986.733573][ T8613] usb 2-1: config 0 descriptor??
[  986.767766][T12475] raw-gadget gadget: fail, usb_ep_enable returned -22
[  986.775013][T12475] raw-gadget gadget: fail, usb_ep_enable returned -22
[  986.956378][ T3837] usb 6-1: device descriptor read/64, error 18
[  987.178516][ T3828] usb 4-1: USB disconnect, device number 9
[  987.246325][ T3837] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  987.455215][   T12] usb 3-1: USB disconnect, device number 77
[  987.457051][ T8613] usb 2-1: USB disconnect, device number 18
[  987.576350][ T3837] usb 6-1: device descriptor read/64, error 18
[  987.986177][ T3837] usb 6-1: device descriptor read/64, error 18
[  988.116847][ T3837] usb usb6-port1: attempt power cycle
21:36:58 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:58 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8d00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:58 executing program 4:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:36:58 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)
dup2(0xffffffffffffffff, r0)

21:36:58 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)

21:36:58 executing program 2:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

[  988.836040][ T3837] usb 6-1: new high-speed USB device number 39 using dummy_hcd
21:36:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8d01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8d02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8d03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8e00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8e01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:36:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8e02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  989.136140][ T8613] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  989.146041][   T17] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  989.345912][ T3837] usb 6-1: device not accepting address 39, error -71
[  989.385956][   T17] usb 4-1: Using ep0 maxpacket: 8
[  989.395903][ T8613] usb 2-1: Using ep0 maxpacket: 8
[  989.516204][ T8613] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  989.524224][ T8613] usb 2-1: config 0 has no interface number 0
[  989.531660][   T17] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  989.539788][ T8613] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  989.551860][   T17] usb 4-1: config 0 has no interface number 0
[  989.558842][   T17] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  989.570635][ T8613] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  989.581265][   T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  989.592084][ T8613] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  989.602470][   T17] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  989.612843][ T8613] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  989.622409][   T17] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  989.632504][ T8613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.641476][   T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.653297][ T8613] usb 2-1: config 0 descriptor??
[  989.665435][   T17] usb 4-1: config 0 descriptor??
[  989.677265][T12604] raw-gadget gadget: fail, usb_ep_enable returned -22
[  989.684502][T12604] raw-gadget gadget: fail, usb_ep_enable returned -22
[  989.706713][T12607] raw-gadget gadget: fail, usb_ep_enable returned -22
[  989.713826][T12607] raw-gadget gadget: fail, usb_ep_enable returned -22
[  989.720829][ T3837] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  989.918191][ T3837] usb 6-1: device descriptor read/8, error -61
[  990.036346][   T17] usb 2-1: USB disconnect, device number 19
[  990.118089][ T3828] usb 4-1: USB disconnect, device number 10
[  990.196398][ T3837] usb 6-1: device descriptor read/8, error -61
[  990.328945][ T3837] usb usb6-port1: unable to enumerate USB device
21:37:02 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8e03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:37:02 executing program 4:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:37:02 executing program 2:
syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x5522, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140), &(0x7f0000000200)={0x0, r1+30000000}, 0x0)

21:37:02 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:37:02 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80103, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8f00}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8f01}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8f02}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x8f03}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x9000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

21:37:02 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x9001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)

[  992.235540][ T8613] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  992.275931][   T17] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  992.395492][ T3837] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  992.495566][ T8613] usb 4-1: Using ep0 maxpacket: 8
[  992.555774][   T17] usb 2-1: Using ep0 maxpacket: 8
[  992.625701][ T8613] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  992.633756][ T8613] usb 4-1: config 0 has no interface number 0
[  992.641559][ T8613] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  992.653563][ T8613] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  992.664232][ T8613] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  992.674893][ T8613] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  992.675467][ T3837] usb 6-1: device descriptor read/64, error 18
[  992.685293][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.698909][   T17] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  992.706956][   T17] usb 2-1: config 0 has no interface number 0
[  992.713030][   T17] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024
[  992.725629][ T8613] usb 4-1: config 0 descriptor??
[  992.730723][   T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  992.746268][T12694] raw-gadget gadget: fail, usb_ep_enable returned -22
[  992.753497][T12694] raw-gadget gadget: fail, usb_ep_enable returned -22
[  992.755454][   T17] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  992.773063][   T17] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5
[  992.782306][   T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.795065][   T17] usb 2-1: config 0 descriptor??
[  992.817669][T12699] raw-gadget gadget: fail, usb_ep_enable returned -22
[  992.844960][T12699] raw-gadget gadget: fail, usb_ep_enable returned -22
[  993.008816][   T17] usb 4-1: USB disconnect, device number 11
[  993.115525][ T3837] usb 6-1: device descriptor read/64, error 18
[  993.182953][T12699] ------------[ cut here ]------------
[  993.193283][T12699] URB 0000000066d39c43 submitted while active
[  993.204873][T12699] WARNING: CPU: 1 PID: 12699 at drivers/usb/core/urb.c:363 usb_submit_urb+0x10c1/0x13b0
[  993.214646][T12699] Kernel panic - not syncing: panic_on_warn set ...
[  993.221212][T12699] CPU: 1 PID: 12699 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0
[  993.229515][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  993.239561][T12699] Call Trace:
[  993.242863][T12699]  dump_stack+0x188/0x20d
[  993.247196][T12699]  ? usb_submit_urb+0x1090/0x13b0
[  993.252394][T12699]  panic+0x2e3/0x75c
[  993.256291][T12699]  ? add_taint.cold+0x16/0x16
[  993.260979][T12699]  ? __probe_kernel_read+0x188/0x1d0
[  993.266389][T12699]  ? __warn.cold+0x14/0x35
[  993.270809][T12699]  ? usb_submit_urb+0x10c1/0x13b0
[  993.275834][T12699]  __warn.cold+0x2f/0x35
[  993.280090][T12699]  ? usb_submit_urb+0x10c1/0x13b0
[  993.285112][T12699]  report_bug+0x27b/0x2f0
[  993.289443][T12699]  do_error_trap+0x12b/0x220
[  993.294048][T12699]  ? usb_submit_urb+0x10c1/0x13b0
[  993.299061][T12699]  do_invalid_op+0x32/0x40
[  993.303541][T12699]  ? usb_submit_urb+0x10c1/0x13b0
[  993.308557][T12699]  invalid_op+0x23/0x30
[  993.312754][T12699] RIP: 0010:usb_submit_urb+0x10c1/0x13b0
[  993.318371][T12699] Code: 89 de e8 12 ae 63 fc 84 db 0f 85 42 f6 ff ff e8 a5 ac 63 fc 4c 89 fe 48 c7 c7 40 1a ac 88 c6 05 82 8b 76 05 01 e8 97 b0 34 fc <0f> 0b e9 20 f6 ff ff c7 44 24 14 01 00 00 00 e9 d7 f6 ff ff 41 bd
[  993.337996][T12699] RSP: 0018:ffffc90001ab72b0 EFLAGS: 00010286
[  993.344057][T12699] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  993.352015][T12699] RDX: 00000000000159a2 RSI: ffffffff815d5ba7 RDI: fffff52000356e48
[  993.359963][T12699] RBP: dffffc0000000000 R08: ffff88804dcb83c0 R09: ffffed1015ce6715
[  993.367914][T12699] R10: ffff8880ae7338a7 R11: ffffed1015ce6714 R12: 0000000000000cc0
[  993.375871][T12699] R13: 00000000fffffff0 R14: ffff8880a7170c00 R15: ffff88804fc53a00
[  993.383872][T12699]  ? vprintk_func+0x97/0x1a6
[  993.388501][T12699]  ? down_read+0x110/0x420
[  993.392939][T12699]  snd_usbmidi_submit_urb+0x19/0x60
[  993.398117][T12699]  snd_usbmidi_input_start.part.0+0xbe/0x1c0
[  993.404079][T12699]  substream_open.isra.0+0x505/0x830
[  993.409376][T12699]  open_substream+0x42e/0x880
[  993.414053][T12699]  rawmidi_open_priv+0x2e8/0x6e0
[  993.418971][T12699]  snd_rawmidi_kernel_open+0x1b5/0x270
[  993.424443][T12699]  midisynth_subscribe+0xf2/0x350
[  993.429454][T12699]  ? midisynth_use+0x250/0x250
[  993.434200][T12699]  ? down_write+0xdb/0x150
[  993.438594][T12699]  ? __down_timeout+0x2d0/0x2d0
[  993.443422][T12699]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  993.449384][T12699]  ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[  993.455191][T12699]  check_and_subscribe_port+0x5b5/0x800
[  993.460767][T12699]  ? midisynth_use+0x250/0x250
[  993.465509][T12699]  snd_seq_port_connect+0x2e4/0x510
[  993.470688][T12699]  snd_seq_ioctl_subscribe_port+0x1df/0x310
[  993.476562][T12699]  snd_seq_kernel_client_ctl+0xeb/0x130
[  993.482087][T12699]  snd_seq_oss_midi_open+0x3ee/0x670
[  993.487348][T12699]  ? snd_seq_oss_midi_setup+0x50/0x50
[  993.492702][T12699]  ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[  993.498504][T12699]  snd_seq_oss_synth_setup_midi+0x123/0x520
[  993.504377][T12699]  ? __raw_spin_lock_init+0x34/0x100
[  993.509642][T12699]  snd_seq_oss_open+0x7fa/0x980
[  993.514485][T12699]  odev_open+0x6c/0x90
[  993.518541][T12699]  ? odev_release+0x70/0x70
[  993.523084][T12699]  soundcore_open+0x446/0x600
[  993.527753][T12699]  ? sound_devnode+0xf0/0xf0
[  993.532342][T12699]  chrdev_open+0x219/0x5c0
[  993.536744][T12699]  ? cdev_put.part.0+0x50/0x50
[  993.541494][T12699]  ? security_file_open+0x84/0x410
[  993.546596][T12699]  do_dentry_open+0x546/0x1340
[  993.551361][T12699]  ? cdev_put.part.0+0x50/0x50
[  993.556102][T12699]  ? security_inode_permission+0xc4/0xf0
[  993.561709][T12699]  ? chown_common+0x550/0x550
[  993.566371][T12699]  ? inode_permission+0xab/0x500
[  993.571288][T12699]  path_openat+0x1e59/0x27d0
[  993.575863][T12699]  ? path_lookupat.isra.0+0x530/0x530
[  993.581218][T12699]  ? lock_acquire+0x1f2/0x8f0
[  993.585877][T12699]  do_filp_open+0x192/0x260
[  993.590401][T12699]  ? may_open_dev+0xf0/0xf0
[  993.594889][T12699]  ? do_raw_spin_lock+0x129/0x2e0
[  993.599896][T12699]  ? _raw_spin_unlock+0x24/0x40
[  993.604756][T12699]  ? __alloc_fd+0x46d/0x600
[  993.609240][T12699]  do_sys_openat2+0x585/0x7d0
[  993.613895][T12699]  ? file_open_root+0x400/0x400
[  993.618748][T12699]  ? put_old_timespec32+0x100/0x1f0
[  993.623920][T12699]  ? get_old_timespec32+0x1f0/0x1f0
[  993.629107][T12699]  do_sys_open+0xc3/0x140
[  993.633451][T12699]  ? filp_open+0x70/0x70
[  993.637677][T12699]  ? do_fast_syscall_32+0xcc/0xe90
[  993.642765][T12699]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  993.648724][T12699]  do_fast_syscall_32+0x270/0xe90
[  993.653752][T12699]  entry_SYSENTER_compat+0x70/0x7f
[  993.659830][T12699] Kernel Offset: disabled
[  993.664292][T12699] Rebooting in 86400 seconds..