executing program 1:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)

17:54:17 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:17 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0)

17:54:17 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080))

17:54:17 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, 0x0)

17:54:17 executing program 0:
socket(0xa, 0x0, 0x1ff)

17:54:17 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff)

17:54:17 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:17 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:18 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0))

17:54:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)

17:54:18 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff)

17:54:18 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000010080)={0x0, 0x0, 0x0}, 0x40000002)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="95", 0x1}], 0x1}, 0x4005)

17:54:18 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:18 executing program 0:
keyctl$reject(0x13, 0x0, 0x0, 0x6, 0x0)

17:54:18 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:18 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={@empty, @private1, @dev, 0x0, 0x0, 0x2})

17:54:18 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xa00, 0x0, 0xb3550aa4ba878255}, 0x9c)

17:54:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000021c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x14}, 0x14}}, 0x0)

17:54:19 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:19 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000001080)=@raw=[@ldst={0x0, 0x2, 0x6, 0x2, 0x1, 0x10, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc}, @jmp={0x5, 0x0, 0xc, 0x9, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x95}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x0, 0x0, 0x0, 0x2069000}], &(0x7f0000001100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x3, 0x1, 0xffff, 0xfffffe00}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)

17:54:19 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))

17:54:19 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:19 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48)

17:54:19 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="89fef72ed03a44dc94ba149a59de5f", 0xf}, {&(0x7f00000002c0)='v', 0x1}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x28}, 0x0)

17:54:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000002080), r0)

17:54:20 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

17:54:20 executing program 0:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x222082, 0x0)

17:54:20 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xa00, 0x0, 0xb3550aa4ba878255}, 0x9c)

17:54:20 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:20 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)

17:54:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x8}}}, 0x24}}, 0x0)

17:54:20 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:20 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xa, &(0x7f0000000000)=@framed={{}, [@cb_func, @func, @map_idx_val, @initr0]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000480)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:54:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0)

17:54:21 executing program 0:
add_key$user(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, &(0x7f0000001580)="c6", 0x1, 0xfffffffffffffffd)

17:54:21 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:21 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x0, 0x0, 0x0, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:54:21 executing program 4:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x280040, 0x0)
fork()

17:54:21 executing program 3:
connect$tipc(0xffffffffffffffff, 0x0, 0x0)

17:54:22 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xa00, 0x0, 0xb3550aa4ba878255}, 0x9c)

17:54:22 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0)

17:54:22 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:22 executing program 3:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
waitid(0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)

17:54:22 executing program 4:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)

17:54:22 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:23 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x0, 0x2, &(0x7f0000001080)=@raw=[@cb_func], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff]}, 0x80)

17:54:23 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:23 executing program 4:
syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0x8200)

17:54:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, 0x0, 0xffffff1f}, 0x0)

17:54:23 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:23 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:24 executing program 1:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)

17:54:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)

17:54:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0)

17:54:24 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0xfd93}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8})

17:54:24 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:24 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:24 executing program 3:
setresuid(0x0, 0x0, 0x0)
add_key$user(&(0x7f0000001500), 0x0, &(0x7f0000001580)="c6090f02f740b1", 0x7, 0xfffffffffffffffd)

17:54:24 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:24 executing program 4:
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)

17:54:25 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x501, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}]}]}, 0x34}}, 0x0)

17:54:25 executing program 3:
keyctl$dh_compute(0x17, &(0x7f00000015c0), 0x0, 0x0, &(0x7f0000001740)={0x0})

17:54:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:25 executing program 0:
pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8})

17:54:25 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x5976, 0xe0, &(0x7f0000000240)=""/224, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:54:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

17:54:25 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:25 executing program 3:
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)

17:54:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

17:54:26 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x222082, 0x0)
write$rfkill(r0, 0x0, 0x0)

17:54:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fea000/0x2000)=nil})
bind(0xffffffffffffffff, &(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x2}, 0x3}}, 0x80)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="3e660f3a20b1feffffff030f0736dfcc0f0012c4c1f5d35f00b9a60300000f32b805000000b900a0ffff0f01c1c744240000000000c74424012d100000c7442406000000000f0114240fc76e000f784500", 0x51}], 0x1, 0x8, &(0x7f0000000140), 0x0)

17:54:26 executing program 3:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)

17:54:26 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

17:54:26 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:26 executing program 1:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x511102, 0x0)

17:54:26 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0)

17:54:26 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:26 executing program 4:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0)

17:54:26 executing program 0:
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
io_uring_setup(0x107f, &(0x7f0000000100)={0x0, 0x4169, 0x20, 0x0, 0x0, 0x0, r0})

17:54:27 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0xfffffffffffffffe, 0x7fff, 0xfffff801, 0x8})
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000))

17:54:27 executing program 3:
add_key$user(&(0x7f0000001500), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
setreuid(0x0, 0x0)

17:54:27 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:27 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))

17:54:27 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:27 executing program 0:
pipe2(&(0x7f0000002080)={<r0=>0xffffffffffffffff}, 0x0)
write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7}, 0xfffffffffffffe19)

17:54:27 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r0, 0x0, 0x40012100)

17:54:27 executing program 4:
pipe2(&(0x7f0000002080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RRENAME(r0, &(0x7f0000002040)={0x7}, 0xfffffffffffffe67)

17:54:28 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:28 executing program 0:
r0 = semget$private(0x0, 0x2, 0x0)
semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000380)=""/4096)

[  699.305806][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
17:54:28 executing program 0:
semget(0x3, 0x2, 0x61)

17:54:28 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:28 executing program 1:
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0xfffffffffffffffe, 0x7fff, 0xfffff801, 0x8})
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000))

17:54:28 executing program 3:
open$dir(&(0x7f0000004100)='./file0\x00', 0x42, 0x0)

17:54:28 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:28 executing program 0:
pipe2(&(0x7f0000002080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0xfffffffffffffe1e)

17:54:28 executing program 3:
shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil)

17:54:29 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)

17:54:29 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:29 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:29 executing program 3:
pipe2(&(0x7f0000003140)={<r0=>0xffffffffffffffff}, 0x0)
getpeername$inet6(r0, 0x0, 0x0)

17:54:29 executing program 4:
r0 = semget$private(0x0, 0x3, 0x0)
semctl$GETNCNT(r0, 0x2, 0xe, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/133)
r1 = semget(0x2, 0x1, 0xa9)
r2 = semget(0x2, 0xf, 0x180)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x3, 0x1, 0x7])
semctl$IPC_RMID(r1, 0x0, 0x0)

17:54:29 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:30 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:54:30 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x3c, 0x17, 0x40, 0x3340, 0x1326, 0xea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0xf2, 0x22, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x1e, 0x0, 0x0)

17:54:30 executing program 3:
pipe2(&(0x7f0000002080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000002140)=ANY=[], 0x450)
write$P9_RLERROR(r0, &(0x7f00000020c0)={0x72, 0x7, 0x0, {0x72, '\xa8\x85\x19\xc7\x18Z\x98\xa4q\xab{\xc0\x9a\xf7\xbb\xf5_R{\xde\xe3\x84\xc0\xea6I\t\x04\"\xa7\x16Xm\x14\x80P\x9f\x96P.\x9d\x1f\xa6=\xfb\x1c\r\xe0\x8a\x99\x03\xc9\xee\x00a\xad\x88\x95g\x92\xe0\xeaG\xc2\xb1N\xb9\x9e\x1f,s5\xa0\xb3\xe2\x1c:\x1f{d\x97\xa4\x84\xd0\xbfE\t\xcc\xc2\x9f\xcf\xab\x8b\xf2\xbd\xa5\x83f\x19\x88\x90\xddF\x9f\xc5\xabT\xcf`j\x05\x03\xbc\xe2'}}, 0xfe80)
write$P9_RWRITE(r0, &(0x7f0000000000)={0xb}, 0xb)

17:54:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005240)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005200)={&(0x7f0000002480)=@newtaction={0x14}, 0x14}}, 0x0)

17:54:30 executing program 0:
socketpair(0x26, 0x0, 0x0, &(0x7f0000001000))

17:54:30 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:30 executing program 4:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80), 0xffffffffffffffff)

17:54:30 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:54:30 executing program 0:
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)

[  701.838368][ T3567] usb 2-1: new high-speed USB device number 11 using dummy_hcd
17:54:30 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:31 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x3ff, 0x1c12}, 0x48)

[  702.226416][ T3567] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
17:54:31 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[{&(0x7f0000001900)='T', 0x1}, {&(0x7f0000001940)='i', 0x1}, {&(0x7f0000001b40)="4d2cc3a2034db8b21fa902059471c3247037b93c74a5c45633b0efe462c216a3abc9401573d7c2cc3fdb542f9acb2fa75f59917b4e54c8d5b30a36a46da3b1", 0x3f, 0xffffffffffffffc1}], 0x0, 0x0)

17:54:31 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  702.413459][ T3567] usb 2-1: New USB device found, idVendor=3340, idProduct=1326, bcdDevice= 0.ea
[  702.424888][ T3567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.433468][ T3567] usb 2-1: Product: syz
[  702.437762][ T3567] usb 2-1: Manufacturer: syz
[  702.442551][ T3567] usb 2-1: SerialNumber: syz
[  702.552931][ T3567] usb 2-1: config 0 descriptor??
[  702.640705][T12696] loop0: detected capacity change from 0 to 264192
[  702.815369][ T3567] usb 2-1: USB disconnect, device number 11
17:54:32 executing program 1:
getgroups(0x2, &(0x7f00000001c0)=[0x0, 0x0])

17:54:32 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001dc0)=[{&(0x7f0000001940)='i', 0x1, 0xffffffffffffff01}], 0x0, 0x0)

17:54:32 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:32 executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000001080)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00'}}, 0x118)

17:54:32 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:32 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_x_sec_ctx={0x1}, @sadb_sa={0x2}]}, 0x30}}, 0x0)

[  703.481385][T12705] loop3: detected capacity change from 0 to 264192
17:54:32 executing program 4:
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x0)
getresuid(&(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80))

17:54:32 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'ip6tnl0\x00', 0x0})

17:54:32 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:32 executing program 3:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002380), 0x1, 0x0)
pwritev(r0, &(0x7f0000002880)=[{&(0x7f00000023c0)="b4", 0x1}], 0x1, 0x3, 0x0)

17:54:33 executing program 1:
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sync()

17:54:33 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:33 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]})
syz_read_part_table(0x0, 0x0, 0x0)

17:54:33 executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x98, 0x3c, 0x17, 0x40, 0x3340, 0x1326, 0xea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xaf, 0xf2, 0x22, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x1e, 0x0, 0x0)

17:54:33 executing program 1:
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x0, 0x2, &(0x7f0000002180)=[{0x0, 0x0, 0xf00c}, {&(0x7f0000000e40)="01a913ba2bcdd0a16f86392b", 0xc, 0x5}], 0x0, &(0x7f0000002280))

17:54:33 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:33 executing program 3:
openat$incfs(0xffffffffffffff9c, &(0x7f00000019c0)='.pending_reads\x00', 0x40, 0x0)

[  704.819164][T12734] loop1: detected capacity change from 0 to 240
17:54:33 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  704.897576][T12734] FAT-fs (loop1): invalid media value (0x00)
[  704.904317][T12734] FAT-fs (loop1): Can't find a valid FAT filesystem
17:54:33 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]})
syz_read_part_table(0x0, 0x0, 0x0)

[  705.122738][ T3567] usb 1-1: new high-speed USB device number 5 using dummy_hcd
17:54:34 executing program 1:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000013c0)='k', &(0x7f0000001440)="af"}, 0x48)

17:54:34 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001dc0), 0x0, &(0x7f0000001e80))

17:54:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]})
syz_read_part_table(0x0, 0x0, 0x0)

[  705.502767][ T3567] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
17:54:34 executing program 1:
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100)

17:54:34 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  705.694697][ T3567] usb 1-1: New USB device found, idVendor=3340, idProduct=1326, bcdDevice= 0.ea
[  705.704482][ T3567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.712811][ T3567] usb 1-1: Product: syz
[  705.717089][ T3567] usb 1-1: Manufacturer: syz
[  705.721944][ T3567] usb 1-1: SerialNumber: syz
[  705.822056][ T3567] usb 1-1: config 0 descriptor??
[  705.842464][T12749] FAT-fs (loop3): bogus number of reserved sectors
[  705.849214][T12749] FAT-fs (loop3): Can't find a valid FAT filesystem
[  706.115466][ T3560] usb 1-1: USB disconnect, device number 5
17:54:35 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x10, {[@local=@item_4={0x3, 0x2, 0x0, "08c7f202"}, @local=@item_4={0x3, 0x2, 0x0, "7c82f41e"}, @local=@item_4={0x3, 0x2, 0x0, "ce2b3e3f"}, @global]}}, 0x0}, 0x0)

17:54:35 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]})
syz_read_part_table(0x0, 0x0, 0x0)

17:54:35 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:35 executing program 3:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002380), 0x1, 0x0)
pwritev(r0, &(0x7f0000002880)=[{&(0x7f00000023c0)="b4", 0x1}], 0x1, 0x0, 0x0)

17:54:35 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

17:54:35 executing program 1:
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

17:54:36 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x2}, 0x14}}, 0x0)

17:54:36 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r0, 0xae80, 0x0)

17:54:36 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:36 executing program 3:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)}, 0x48)

17:54:36 executing program 4:
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[  707.479765][ T3560] usb 1-1: new high-speed USB device number 6 using dummy_hcd
17:54:36 executing program 1:
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000880))

[  707.845580][ T3560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.857144][ T3560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.867198][ T3560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  707.880455][ T3560] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  707.889763][ T3560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.237038][ T3560] usb 1-1: config 0 descriptor??
[  708.727045][ T3560] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  708.742820][ T3560] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  708.926457][ T3567] usb 1-1: USB disconnect, device number 6
17:54:38 executing program 3:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8400fffffffa)

17:54:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x0, 0x2, &(0x7f0000002180)=[{&(0x7f0000000c80), 0x0, 0xf00c}, {&(0x7f0000000e40)="01a913ba2bcdd0a16f86392b0f7c2e3cbd", 0x11}], 0x0, &(0x7f0000002280))

17:54:38 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:54:38 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:38 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0x8, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

17:54:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000005200)={&(0x7f0000002480)=@newtaction={0x1058, 0x30, 0x0, 0x0, 0x0, {}, [{0x1044, 0x1, [@m_police={0x1040, 0x0, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x1058}}, 0x0)

17:54:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x0, 0x2, &(0x7f0000002180)=[{0x0, 0x0, 0xf00c}, {&(0x7f0000000e40)="01a913ba2bcdd0a16f86", 0xa, 0x5}], 0x0, &(0x7f0000002280))

[  709.648445][   T24] audit: type=1804 audit(1640541278.590:152): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir789423681/syzkaller.OxGLMi/611/bus" dev="sda1" ino=1218 res=1 errno=0
17:54:38 executing program 1:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)="af"}, 0x48)

17:54:38 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:54:38 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:38 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ftruncate(r1, 0x1)
socket(0x10, 0x3, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x109840, 0xa, 0x1}, 0x18)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

[  709.861371][T12793] loop0: detected capacity change from 0 to 240
[  709.940509][T12793] FAT-fs (loop0): invalid media value (0x00)
[  709.947498][T12793] FAT-fs (loop0): Can't find a valid FAT filesystem
17:54:39 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c)

[  710.132334][T12800] loop4: detected capacity change from 0 to 240
[  710.181301][T12800] FAT-fs (loop4): bogus number of FAT structure
[  710.188094][T12800] FAT-fs (loop4): Can't find a valid FAT filesystem
17:54:39 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000180), 0x8)

17:54:39 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:54:39 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:39 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x401, &(0x7f00000020c0)=""/4098, &(0x7f0000000000)=0x1002)

17:54:39 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
sendmsg$inet_sctp(r2, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=[@prinfo={0x14}, @sndinfo={0x1c}], 0x30}, 0x0)

17:54:39 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:39 executing program 0:
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1011, 0xffffffffffffffff, 0x0)

17:54:39 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ftruncate(r1, 0x1)
socket(0x10, 0x3, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x109840, 0xa, 0x1}, 0x18)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

17:54:40 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:40 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8)

17:54:40 executing program 0:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

17:54:40 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300), 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:40 executing program 1:
r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000900)={0x48, 0x2}, 0x10)
dup2(r0, r1)

17:54:40 executing program 4:
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)

17:54:41 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x10)

17:54:41 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ftruncate(r1, 0x1)
socket(0x10, 0x3, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x109840, 0xa, 0x1}, 0x18)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

17:54:41 executing program 1:
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

17:54:41 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:41 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300), 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:41 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0xaf}, 0x0)

17:54:41 executing program 0:
r0 = socket(0x1c, 0x10000001, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000180)=@in6={0xfffffffffffffd95, 0x1c, 0x1}, 0x1c, 0x0}, 0x0)

17:54:41 executing program 1:
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x3, 0x410, 0xffffffffffffffff, 0x0)

17:54:42 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300), 0x0)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:42 executing program 4:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

17:54:42 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c)

17:54:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x24, 0x0, &(0x7f0000000000)=0x96)

17:54:42 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:42 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ftruncate(r1, 0x1)
socket(0x10, 0x3, 0x0)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x109840, 0xa, 0x1}, 0x18)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)

17:54:42 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
sendmsg$inet_sctp(r2, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x2a00}}, @sndrcv={0x2c}], 0x48}, 0x0)

17:54:42 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:43 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
write(r0, &(0x7f0000000040)="fe", 0x1)
sendto(r0, 0x0, 0x0, 0x18c, 0x0, 0x0)

17:54:43 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c)

17:54:43 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:43 executing program 2:
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:43 executing program 4:
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)

17:54:43 executing program 0:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000200)='cubic\x00', 0x6)

17:54:44 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r1, r1)
dup2(r0, r2)

17:54:44 executing program 3:
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

17:54:44 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:44 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0)

17:54:44 executing program 2:
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:44 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x27, 0x0, &(0x7f0000000240))

17:54:44 executing program 3:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)

17:54:44 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:44 executing program 4:
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)

17:54:44 executing program 1:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x3, 0x410, 0xffffffffffffffff, 0x0)

17:54:45 executing program 3:
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)

17:54:45 executing program 2:
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:45 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
r3 = dup2(r0, r2)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xa, &(0x7f00000001c0), &(0x7f0000000000)=0x98)

17:54:45 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:45 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000080)='h', 0x1)

17:54:45 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x11, &(0x7f00000000c0), 0x4)

17:54:45 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r0, &(0x7f0000002200)={0x0, 0x0, 0x0}, 0x0)

17:54:45 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)=0x10)

17:54:45 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:45 executing program 0:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='vegas\x00', 0x6)
close(r0)

17:54:46 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:46 executing program 1:
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3)

17:54:46 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x24, &(0x7f0000000000), &(0x7f00000000c0)=0x98)

17:54:46 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:46 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
shutdown(r0, 0x0)

17:54:46 executing program 1:
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x410, 0xffffffffffffffff, 0x0)
munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)

17:54:46 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:46 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000140), 0x84)

17:54:46 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:46 executing program 3:
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x410, 0xffffffffffffffff, 0x0)

17:54:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2, 0x0, &(0x7f00000002c0))

17:54:47 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x8903, &(0x7f0000000000)={0x0, "3ae215e53ddb3ca717990cb8dbf7c632c69ed306027777f09fec68ff3a99be797690f53bdedca4fd92f40daad74e3c191d6878e291d7eff04c7d6c4514c6d721f3f4be08e4cd74eeaec8f8f2617a255862635b425cc775b8f7fd73105b28b3076813519b3d118bd4bfd872279288c41be2030e982df61490c22fe19d201b8eab"})

17:54:47 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

17:54:47 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a3ff200240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90"], 0x0)

17:54:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:47 executing program 1:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000003580)={{0x0, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

17:54:47 executing program 4:
r0 = inotify_init1(0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0)

17:54:47 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000003e00)={<r1=>0xffffffffffffffff})
ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000003e40))

17:54:47 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x6, &(0x7f0000000040), 0x4)

17:54:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:47 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0xf, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

17:54:47 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x24, &(0x7f0000000040), 0x4)

17:54:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000076c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}}, 0x0)

17:54:48 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000001e00)=@base={0x16, 0x0, 0x0, 0x4}, 0x48)

17:54:48 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:48 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8970, &(0x7f00000001c0))

17:54:48 executing program 1:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x8914, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

17:54:48 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xb, 0x0, &(0x7f00000002c0))

17:54:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x0, 0x0)

17:54:48 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4c, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0)

17:54:49 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:49 executing program 4:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000000)={0x0, "3ae215e53ddb3ca717990cb8dbf7c632c69ed306027777f09fec68ff3a99be797690f53bdedca4fd92f40daad74e3c191d6878e291d7eff04c7d6c4514c6d721f3f4be08e4cd74eeaec8f8f2617a255862635b425cc775b8f7fd73105b28b3076813519b3d118bd4bfd872279288c41be2030e982df61490c22fe19d201b8eab"})

17:54:49 executing program 3:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f00000042c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@rthdrdstopts={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x1f}}], 0x30}}], 0x1, 0x0)

17:54:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:49 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x0, 0x0, 0x1}, 0x48)

17:54:49 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x110, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x69, 0xfa, "6134d6a40dde4c32fb4a2c6efc9d39b38cfe1e21a349c71e6a566e8225ca6610d06d310b7d6350f2e1d7a6b28ea96b9daf0f4f51c79ab7b822ebcaa10570da1c0c1d70b2b33e34cc6fdf2b62c1e936151b961e847e17943a50cc3366daa1945b918c0c996e"}, @NL80211_ATTR_FILS_ERP_REALM={0x79, 0xfa, "37d78665cca84ae090960642646b8d38093ab6cef7c6af754fbae3190766c696b80e36e6a81a53ff7f7b0770877979822f5a6df86471213b369205b4bfa5efd68cbd02cee83073d6124f5e5f8b90a932615a144777d90e0e3c1cd5e81a31d41ff5ca7f037ac7b4e814513207246f450e106c9ad126"}]]}, 0x110}}, 0x0)

17:54:49 executing program 4:
socket$inet6_sctp(0xa, 0x451ee8295a69815c, 0x84)

17:54:49 executing program 3:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x8, 0x1, &(0x7f00000000c0)=@raw=[@ldst], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:54:49 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)

17:54:49 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:49 executing program 0:
r0 = socket(0x25, 0x5, 0x0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0)

17:54:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x9, 0x0, &(0x7f00000002c0))

17:54:50 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:50 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0)

17:54:50 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0xb, 0x0, 0x0, 0x4}, 0x48)

17:54:50 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

17:54:50 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)

17:54:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x18, 0x0, &(0x7f00000002c0))

17:54:50 executing program 4:
socketpair(0x23, 0x0, 0x1, &(0x7f0000001800))

17:54:50 executing program 1:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000380)=0x3, 0x4)

17:54:50 executing program 0:
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

17:54:50 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}}], 0x1, 0x40)

17:54:50 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x4c, 0x0, 0x0)

17:54:50 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x12, &(0x7f0000000040), 0x4)

17:54:51 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:51 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockname$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10)

17:54:51 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8913, &(0x7f00000001c0))

17:54:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

17:54:51 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x4c, 0x0, 0x0)

17:54:51 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x49, &(0x7f0000000040), 0x4)

17:54:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x30d, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}}, 0x0)

17:54:51 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000b00), 0x4)

17:54:51 executing program 3:
socketpair(0xa, 0x0, 0x8001, &(0x7f0000000000))

17:54:51 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1, 0x4c, 0x0, 0x0)

17:54:51 executing program 4:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0xa, 0x0, 0x0)

17:54:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'macsec0\x00'}}}}}, 0x30}}, 0x0)

17:54:52 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:52 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @multicast2}, 0xc)

17:54:52 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c)

17:54:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x117, @mgmt_frame=@reassoc_resp={@with_ht={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a}}}]}, 0x58}}, 0x0)

17:54:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0xe, 0x4)

17:54:52 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)

17:54:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x9c)

17:54:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)

17:54:52 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000040)=0x4)

17:54:52 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c)

17:54:52 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4, "998beb10"}, &(0x7f0000000140)=0x28)

17:54:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x65}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

17:54:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0)

17:54:53 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="ce", 0x1a000, 0x4c, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c)

17:54:53 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:53 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)

17:54:53 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000046c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x5}, 0x48)

17:54:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, 0x0}, 0x42)

17:54:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000240)={0x18, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}]}, 0x18}}, 0x0)

17:54:53 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}}], 0x1, 0x0)

17:54:53 executing program 1:
socketpair(0x2, 0x5, 0x0, &(0x7f0000000c00))

17:54:53 executing program 5:
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair(0x0, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

17:54:54 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:54 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x40086602, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x3, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

17:54:54 executing program 5:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

17:54:54 executing program 0:
socketpair(0x10, 0x3, 0x3, &(0x7f0000001800))

17:54:54 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x23, &(0x7f0000000040), 0x4)

17:54:54 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0xf, &(0x7f0000000040), 0x4)

17:54:54 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:54 executing program 5:
socketpair(0x29, 0x5, 0x8, &(0x7f0000000100))

17:54:54 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x2, &(0x7f00000019c0)=@raw=[@btf_id], &(0x7f0000000240)='syzkaller\x00', 0xe47, 0x80, &(0x7f0000001a40)=""/128, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:54:55 executing program 4:
socketpair(0x1e, 0x0, 0x205, &(0x7f0000000000))

17:54:55 executing program 0:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "13c2d3bf092083047120fa5f0eb60e81080ee29c83a0771c5451d0992dae7c4c5bd967a0fab614d1edeeefb12a99288cb4fb3b3696743f6417001054c18c9fc1778858771950d20b8aff9a97b6c51a59"}, 0xd8)

17:54:55 executing program 3:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x250}, 0x0)

17:54:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x14, r1, 0xf}, 0x14}}, 0x0)

17:54:55 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:55 executing program 1:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x8941, 0x0)

17:54:55 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0xc, 0x7, &(0x7f0000000100)=@raw=[@cb_func, @kfunc, @map_fd, @map_idx], &(0x7f0000000180)='GPL\x00', 0x5, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:54:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

17:54:55 executing program 5:
r0 = socket(0x18, 0x800, 0x1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0}}, 0x0)

17:54:55 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:54:55 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e61f400e800000000000000000000000000000000000000000000000000000005"], 0x78)

17:54:55 executing program 1:
pipe(&(0x7f0000005b00))
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)

17:54:55 executing program 5:
r0 = socket$phonet(0x23, 0x2, 0x1)
getsockname(r0, 0x0, &(0x7f00000004c0))

17:54:55 executing program 3:
bpf$BPF_PROG_WITH_BTFID_LOAD(0xb, 0x0, 0x0)

17:54:56 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
connect(r0, 0x0, 0x0)

17:54:56 executing program 0:
socketpair(0x24, 0x0, 0x0, &(0x7f0000001f00))

17:54:56 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:54:56 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x891e, &(0x7f0000000580)={'sit0\x00', 0x0})

17:54:56 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000000c0))

17:54:56 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@private0, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8)

17:54:56 executing program 4:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000080))

17:54:56 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@mcast2, 0x100, 0x0, 0xff}, 0x20)

17:54:56 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r1, 0xae80, 0x0)

17:54:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x101)

17:54:56 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x13, 0x0, 0x0)

17:54:56 executing program 5:
socketpair(0x22, 0x0, 0x2, &(0x7f0000000380))

17:54:56 executing program 0:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x21)

17:54:56 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect(r0, 0x0, 0x0)

17:54:57 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:57 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x22, &(0x7f0000000040), 0x4)

17:54:57 executing program 3:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

17:54:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000)

17:54:57 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@local}}}, 0xe8)

17:54:57 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}], 0x2, 0x0)

17:54:57 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x891d, &(0x7f0000000580)={'sit0\x00', 0x0})

17:54:57 executing program 1:
socketpair(0x2, 0x80803, 0x4, &(0x7f0000000000))

17:54:57 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002141, 0x0)

17:54:57 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0)

17:54:57 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@local}}}, 0xe8)

17:54:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'macvlan0\x00', @ifru_hwaddr=@dev})

17:54:58 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg(r0, &(0x7f00000077c0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ba48102c077a1b04547db06d653461cca92bbc889d5ab2cc794265fc806373d027e1ca174df6245e5568622f0c8427edc419f49b1089a234d4fd88c0be8844b2e931f7ead42be8f81fb9cd32b45182c2e639df709cfd9b1477cc7f0285b060e83464efe5d90264d9527004e84f5cb159aa64d9a1713941df743a641c185a4bcf23a3cffe917f973f60576dde2c3ad0b705391220d5b6d88a889183dd5827b0c14198e35792d914370083d32fc50b09909d3c9652730f3356db028f054c2a2325080d141fe46699d5f7e26f", 0xcb}], 0x1}}, {{&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a3ead84d917d6d78f532f84e378306461c15403274165b0e20df2a8129a426c87b82644e62e06241acc3ff624d4f8a28e21e7bf41826305aa860e0f1129d387654a7ab8f602117c04f1d396179cfc2e9b788df479af1b85369d053f9babc15f94015944d072ce6e7d66cde7", 0x6c}, {0x0}, {0x0}], 0x3, &(0x7f0000000600)=[{0x98, 0x102, 0xb6a0, "5f7fc03f93c72f54289b6b9a14db8831d5383fdf7f98d3d1988ff3de7838d02124daa472fcabe2300c361e8355faccba0128f77b81170325508b9f4a995831c3cb24837ecf66676c19c51cc0e98737534b1ba739c68eff7e5f56d44010989e30661db0d3857c992ce4b05e8f1492bb349e2bcae06217855c01ff02d3bda06dd829"}, {0x10, 0x11}, {0xb0, 0x0, 0x101, "d53e997c02b014e7c3b26ad579afa5e9e020bd6f701e3ca544a4992fdb62f239fa2939b9efc686a56c13cd310de7663f91a47897fd9b7b56f526c6744f14c8e9370f09696a0f4aa6a4a7f8f9899ea46ffa03be17e9de30940f7524e4732047e3afc4baf3248bf45badba008e16003832fee81a34a608e99575df5e29fa87af7ec94b351fb361f217527810e88be2e20cbd4967e89bc463bccb55110980"}, {0x40, 0x0, 0x9, "387f2b8bb40e85e8fab8e00841623ff7a4317c80aa6a0fe76796a1a538d401988840fcb8f83a91b09f70fa40cc8a1a"}, {0x48, 0x103, 0x40, "c23c3fcf6f18bd8dcb4eaa030022d9cf3432534263b1a8151ec3c7c38f6f5e1b2aae59856495449d0c94f62c98b32df514cb9e"}, {0xc8, 0x0, 0x0, "8d45667b17cfdaed680a89a88e0eeccaaef788ba91b27a73e284b2912ec775109393e38eccdb37a0b077a23b87c018ee96192bdb63e59ba0f8063b3d1a7dc51214cc295f96b2ee6857eb5189b51b6f245da29c176d497b76048bfa7d77ae3b19feaf1b2f7c896a6b2d83dbae19274335c8a75dce407c3ccee57050ef8bb468deaa080c6f4513907d3ceb6026df69f8e776f061756da2be41104777505b55fcdfc75d17eac069dda8fac45b06c37f17f46282dbd5"}], 0x2a8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[{0x1010, 0x104, 0x80, "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"}, {0x48, 0x0, 0x8994, "a910164dfc0505c6a0bc1fa69b0e1a8089a2b7314cd9a98d62fbd22d37dedb9ac94984b300931feb44e6e9d21a6ea133970671bc1a3b1e25"}, {0x100, 0x113, 0x1000, "f8c272d561e1c4a6cc69d67ee86f87ddd81bebc3c637f8133280b4bfe02f805a2006020ea36ba85a41f80f9b090d0eb194f65b79d954f9be8ca4c4d0cb4e519772f382963705fbda5b004a3c4c39894b87a96e06309369adeb1264d31231e18b3d93feb57d05cf8f30a056ec508f2e3307f1f5d78c9482aa0ac74a3ea965c099179e9e07e715f06c576a8aaa99518c586656e2c9d3c253f2032f5bb7ce272ce8a32944c180c0a90a6c89be45d65c42d7f83ad100ff2ac9c6e77aae80876b7783b1cdf36ec0775eeeaf8062d63e109f866de5ef0534888c2ac2eb6116c4dd652869b7469a2783583bd6ff231d9fea"}], 0x1158}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000076c0)=[{0x10, 0x3a}], 0x10}}], 0x4, 0x8000)

17:54:58 executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10063, 0x0)

17:54:58 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'})

17:54:58 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmmsg$sock(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

17:54:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}}, 0x0)

17:54:58 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:58 executing program 1:
read$hiddev(0xffffffffffffffff, 0x0, 0x0)

17:54:58 executing program 3:
io_setup(0x80, &(0x7f0000000040)=<r0=>0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000018c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000080)}])

17:54:58 executing program 4:
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0), 0xffffffffffffffdc})

17:54:58 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0)

17:54:58 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

17:54:59 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000000), 0x200, 0x242)

17:54:59 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xc}, {0x6}]})

17:54:59 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:54:59 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x16}]})
socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0)

17:54:59 executing program 4:
io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0))

[  730.435229][   T24] audit: type=1326 audit(1640541299.380:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13312 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
17:54:59 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc539, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}})

17:54:59 executing program 3:
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',defcontext=s'])

17:54:59 executing program 1:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0)
recvmsg$unix(r0, 0x0, 0x0)

[  730.637901][   T24] audit: type=1326 audit(1640541299.580:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13317 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e95549 code=0x0
17:54:59 executing program 4:
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xff2a4405991833be, 0x0)

17:54:59 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x2}, {0x16}]})

17:54:59 executing program 3:
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x42ddf65c895fe788)

17:55:00 executing program 4:
syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x8002)

17:55:00 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  731.182470][ T3567] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  731.343840][   T24] audit: type=1326 audit(1640541300.290:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13333 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
[  731.442116][ T3567] usb 6-1: Using ep0 maxpacket: 8
17:55:00 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xfffffff2, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0)

17:55:00 executing program 0:
fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)

17:55:00 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xe}, 0x0)

17:55:00 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00', @ANYRES32], 0x90}, 0x0)

[  731.662580][ T3567] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  731.853537][ T3567] usb 6-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40
[  731.863663][ T3567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.871974][ T3567] usb 6-1: Product: syz
[  731.876255][ T3567] usb 6-1: Manufacturer: syz
[  731.880986][ T3567] usb 6-1: SerialNumber: syz
[  732.066854][ T3567] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[  732.257029][ T3567] usb 6-1: USB disconnect, device number 7
17:55:01 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]})

17:55:01 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:01 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

17:55:01 executing program 4:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x329d80)

17:55:01 executing program 3:
io_setup(0x3, &(0x7f0000004c40)=<r0=>0x0)
io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000004cc0))

17:55:01 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000002f40)='ns/ipc\x00')

17:55:02 executing program 1:
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
clock_gettime(0x0, &(0x7f0000003f80))

17:55:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

17:55:02 executing program 0:
syz_mount_image$f2fs(&(0x7f00000025c0), &(0x7f0000002600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@fsync_mode_strict}, {@whint_mode_fs}, {}, {@fastboot}, {@four_active_logs}, {@noinline_data}], [{@obj_user={'obj_user', 0x3d, '\'@[#@^$]#\xaa&-^\'&'}}, {@fsuuid={'fsuuid', 0x3d, {[0xe, 0x62, 0x30, 0x39, 0x34, 0x37, 0x62, 0x62], 0x2d, [0x39, 0x30, 0x64, 0x30], 0x2d, [0x32, 0x36, 0x38, 0x32], 0x2d, [0x62, 0x1, 0x34, 0x62], 0x2d, [0x62, 0x65, 0x30, 0x64, 0x39, 0x34, 0x36, 0x62]}}}, {@uid_eq}, {@seclabel}, {@appraise_type}, {@appraise_type}]})

17:55:02 executing program 3:
socketpair(0x5, 0x0, 0x0, &(0x7f0000000140))

[  733.437861][   T24] audit: type=1326 audit(1640541302.380:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13362 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eac549 code=0x0
17:55:02 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:02 executing program 5:
socketpair(0x10, 0x2, 0x0, &(0x7f0000000100))

17:55:03 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)

17:55:03 executing program 4:
socket$tipc(0x1e, 0x0, 0x0)

17:55:03 executing program 0:
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f00000004c0)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'Q\\'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]})

17:55:03 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2)
ioctl$BLKROTATIONAL(r0, 0x4c02, 0x0)

17:55:03 executing program 5:
socket(0x2, 0x0, 0x1000)

17:55:03 executing program 4:
pselect6(0x40, &(0x7f0000000000)={0x8000}, &(0x7f0000000040)={0x70000}, 0x0, 0x0, 0x0)

[  734.753172][T13385] FAT-fs (loop0): Unrecognized mount option "smackfsdef=Q\" or missing value
17:55:03 executing program 1:
bpf$OBJ_GET_PROG(0x12, 0x0, 0x0)

17:55:03 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:04 executing program 3:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2102)

17:55:04 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000000)=0xfffffffffffffc56)

17:55:04 executing program 0:
bpf$OBJ_GET_PROG(0x6, 0x0, 0x0)

17:55:04 executing program 1:
syz_mount_image$f2fs(&(0x7f00000025c0), &(0x7f0000002600)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[], [{@obj_user={'obj_user', 0x3d, '\'@[#@^$]#\xaa&-^\'&'}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [0x39], 0x2d, [0x0, 0x36, 0x38, 0x32], 0x2d, [0x0, 0x0, 0x34], 0x2d, [0x0, 0x0, 0x30, 0x0, 0x39, 0x0, 0x36]}}}]})

17:55:05 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x204}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0)

[  736.047466][T13403] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  736.056187][T13403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
17:55:05 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:05 executing program 0:
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f757365725f78617474722c757365725f786155ad695cbe1ae47474722c6e6f61636c2c61636c2c6e6f757365725f78617474722c61636c2c6e6f61636c2c6e6f61636c2c757365725f78617474722c646566636f6e746578743d", @ANYBLOB=',defcontext='])

[  736.140726][T13403] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  736.149462][T13403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
17:55:05 executing program 5:
socket$inet6(0xa, 0x5, 0x2be0)

17:55:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

17:55:05 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0)

17:55:05 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000001580)=[{&(0x7f00000003c0)='z', 0x1}], 0x0, 0x0)

17:55:05 executing program 0:
syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002840)=[{0x0}], 0x0, 0x0)

17:55:05 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000007300)={0x0, <r1=>0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000007340)={0x0, r1+10000000})

17:55:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000021c0), 0xffffffffffffffff)

17:55:05 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:05 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={0x0}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={0x0}}, 0x0)

17:55:06 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480))
setresgid(0x0, 0xee01, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
exit_group(0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="2d706964732073d93de002aa400b18aa7ae1d310d67be49ad538107be594d66e3660ed1752a876fb63f5ee77a80de79afc2e6204376a750f2fd369a08eb78fe4ce4266f474754625aecf09c2804f2ccdd8f1f075a3fefbf0b9eccf9c972a3116abfadc955b4d7b78afd0c80b5cf373a01236c21b548ba1881cdf45e1042b49bacf34349705307c4f55857ee0d870591ae5e712767a3ba5ce407c4b09c3da4ec5b91b8e9cc8a900"], 0x6)

17:55:06 executing program 0:
io_setup(0x5, &(0x7f0000009040)=<r0=>0x0)
io_cancel(r0, &(0x7f000000d180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
io_submit(r0, 0x3, &(0x7f0000004180)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0, 0x0])

17:55:06 executing program 4:
bpf$OBJ_GET_PROG(0x13, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

17:55:06 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x101}, 0x14}}, 0x0)

17:55:06 executing program 1:
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003e80)=[{0x0}], 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000005c80), 0xffffffffffffffff)

17:55:06 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:06 executing program 4:
r0 = fsopen(&(0x7f0000000080)='pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

17:55:06 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0)

17:55:06 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480))
setresgid(0x0, 0xee01, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
exit_group(0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="2d706964732073d93de002aa400b18aa7ae1d310d67be49ad538107be594d66e3660ed1752a876fb63f5ee77a80de79afc2e6204376a750f2fd369a08eb78fe4ce4266f474754625aecf09c2804f2ccdd8f1f075a3fefbf0b9eccf9c972a3116abfadc955b4d7b78afd0c80b5cf373a01236c21b548ba1881cdf45e1042b49bacf34349705307c4f55857ee0d870591ae5e712767a3ba5ce407c4b09c3da4ec5b91b8e9cc8a900"], 0x6)

17:55:06 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
read$FUSE(r0, 0x0, 0x0)

17:55:06 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)

17:55:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0)

17:55:07 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)=ANY=[]})

17:55:07 executing program 5:
syz_open_dev$vcsu(&(0x7f00000013c0), 0x0, 0xc0)

17:55:07 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:07 executing program 1:
syz_mount_image$f2fs(&(0x7f0000003bc0), &(0x7f0000003c00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000005600), &(0x7f0000005640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005b80)={[], [{@smackfshat}]})

17:55:07 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480))
setresgid(0x0, 0xee01, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
exit_group(0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="2d706964732073d93de002aa400b18aa7ae1d310d67be49ad538107be594d66e3660ed1752a876fb63f5ee77a80de79afc2e6204376a750f2fd369a08eb78fe4ce4266f474754625aecf09c2804f2ccdd8f1f075a3fefbf0b9eccf9c972a3116abfadc955b4d7b78afd0c80b5cf373a01236c21b548ba1881cdf45e1042b49bacf34349705307c4f55857ee0d870591ae5e712767a3ba5ce407c4b09c3da4ec5b91b8e9cc8a900"], 0x6)

17:55:07 executing program 4:
setxattr$trusted_overlay_nlink(&(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0)

17:55:07 executing program 0:
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
open_tree(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x5, &(0x7f0000009040))

17:55:07 executing program 5:
socket$nl_xfrm(0x10, 0x3, 0x6)

[  738.856948][T13468] tmpfs: Unknown parameter 'smackfshat'
17:55:07 executing program 1:
syz_mount_image$f2fs(&(0x7f00000025c0), &(0x7f0000002600)='./file0\x00', 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[], [{@fsuuid}, {@uid_eq}]})

17:55:08 executing program 4:
syz_mount_image$f2fs(&(0x7f0000003bc0), &(0x7f0000003c00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000005600), &(0x7f0000005640)='./file0\x00', 0x0, 0x4, &(0x7f0000005ac0)=[{&(0x7f0000005680)="ac", 0x1}, {&(0x7f0000005900)="18", 0x1, 0x100000000000}, {&(0x7f0000005a00)="e5", 0x1, 0x22b7}, {&(0x7f0000005a80)='d', 0x1, 0xfffffffffffeffff}], 0x0, &(0x7f0000005b80)={[], [{@smackfshat}]})

17:55:08 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000480))
setresgid(0x0, 0xee01, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
exit_group(0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="2d706964732073d93de002aa400b18aa7ae1d310d67be49ad538107be594d66e3660ed1752a876fb63f5ee77a80de79afc2e6204376a750f2fd369a08eb78fe4ce4266f474754625aecf09c2804f2ccdd8f1f075a3fefbf0b9eccf9c972a3116abfadc955b4d7b78afd0c80b5cf373a01236c21b548ba1881cdf45e1042b49bacf34349705307c4f55857ee0d870591ae5e712767a3ba5ce407c4b09c3da4ec5b91b8e9cc8a900"], 0x6)

17:55:08 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:08 executing program 5:
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xcb0874eba2953ee0, 0x0)

17:55:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0)

[  739.460062][T13482] loop4: detected capacity change from 0 to 264192
[  739.464291][T13480] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  739.474873][T13480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  739.594525][T13482] tmpfs: Unknown parameter 'smackfshat'
[  739.700828][T13480] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  739.709172][T13480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
17:55:08 executing program 0:
openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

17:55:08 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x4000008)

17:55:08 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:08 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
syz_mount_image$f2fs(&(0x7f00000025c0), &(0x7f0000002600)='./file0\x00', 0x7dc8, 0x1, &(0x7f0000002840)=[{0x0}], 0x0, &(0x7f00000028c0)={[{@fastboot}, {@four_active_logs}, {@noinline_data}], [{@fsuuid}, {@appraise_type}]})

17:55:09 executing program 3:
bpf$OBJ_GET_PROG(0x9, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

17:55:09 executing program 1:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0)
getresgid(&(0x7f00000031c0), &(0x7f0000003200), &(0x7f0000003240))

17:55:09 executing program 3:
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

[  740.308369][T13501] loop5: detected capacity change from 0 to 62
17:55:09 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

17:55:09 executing program 0:
syslog(0x2, &(0x7f0000000140)=""/73, 0xc7b580a5208e7e9e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0)

[  740.442435][T13501] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  740.450343][T13501] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  740.544834][T13501] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  740.553727][T13501] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
17:55:09 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:09 executing program 1:
syz_open_dev$hiddev(&(0x7f0000002cc0), 0x0, 0x0)

17:55:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x4c01, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r2, 0x89a0, &(0x7f0000000040)={'wlan0\x00', @ifru_data=0x0})
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xffff)
r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x802)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0))

17:55:09 executing program 4:
syz_mount_image$erofs(0x0, 0x0, 0x0, 0x6, &(0x7f00000027c0)=[{&(0x7f00000004c0)="e4", 0x1}, {&(0x7f00000005c0)="b5200291a38ae1ffa172c21c7f56ef1cf2389bfea89b83370cb82e9acea828f09e0755826b90656701db6ba598e1d74e2c3dead2b124a31acce18ca8d228668f05ae7c376eb9974f65218a0501e0375b6e8c1e4d90f2fe97c72287e14048eab07ea8c0352e565222c3e57f2492d57000f0eae95827062be6abf4834d7b2db38d9f2221f0de7194a1a1fd8113a6cc9e41005c4d08aca3dc059829204846c386d218308f5a5db74dd50c51258dc081b039c85eaab7b1120f032ed094e919b2f066e77a4e84e6fc66448d1fd83415dc9ffa6755751efb915c5fbd1926af3903cb9eb008373bb4f97a7623daf9756e7a7482878dd7e73e74b6fd0e3992709653aa1d4d9143704985bedabec1514a2a5b63ff6991cfac7f442ce5734e9a30159974f4d8bf8ae2935ba4909163a6e08b72948533b6878d657a8acf00819d18bf3a6864e53253f9ef73ed96976714ed8247f0b53b876fe745bb12fcda3ef8d17e9165d498fc0ae5fcb5c7ee3beb8aece133ce6a1cfa76d81c8ff270b72921b163f4af554062f41ec89b612bf76b11117e8c5ee46cf189fdfa15687fdc0b50517da9a4dbc1ac771bab861f17f4930e3cc2993417bc85e80f915b84476e3416a6c1ca39c37fba23080142ee88556799cf627d132f2a894629747f0f8d93a9c9117dba98a361f410e11ac9ea46dcba32dcc1e5286b5897c381f941fc54996129751399cedac57302cc9b4da8ce6e2d0ad9faa4e83afef43153a3e7b9fa44993bb226ae1a4827faf9933b6d675b5fad8df7e053afcfcfc0b4e9d45273f418aa9abb32e5b79103a3ce53717a923ec7efb77341ac0337c27ff1857ca5d5cdc1054542516194a5d63e19137126bab46f9c5a77276ead570d34fab38180ecd3a76985599409236d72717de16982f7f34b23cfba923a42dc922a35a5436cb62d0c8314e33ae41c6393e929f8b69265cea167115132b4051268e0f9070eaa1ee6397b744f85ad49b2c07dbb1765e37e482cee59a87b31cb29ae69124b0e2c28997dd8b414fc160ab3524c79249b0920b18b15bc6fdd1cfb98ffaffcbd84f7cf8370fc02789f48b8409be8f22138471608a6beefe9f7c3d29639702bb3dfaa51d69e0316238ceb0bd0b54c78174f0a2c461a1cce508ec5a9819e9d19f42497cc2475865cc7fbacf160d807fc69e34ec897ce111f0835a7683f1edb8b0cc72777a1785a5f4ec6ebca50c905f03b0b3a7f948e124f709db561fe37a5eb98579e0c2e020acd70109c63851797168e0e25107e364d4911cb298e5623f9ffe25bf452f874e93c8ff4fb9f280ee524241930034e942170972b2b9a57eb02d06eb3c88e400c993890e397899e0f72c5f6bcd59859d2c4675582541865ad3655d7a6585335724da0bc9d2a860b8ba288dae670581f058eea32a15afb77a5db49743a0489fdbddb67391982f8bd4476cba844a40fc3167f39c511d46075c684f8837cbd8e853dbc65b0b4308751505c782df6cd33a63d37d279a09f1a3659fc75ed975f97bfefe32e4c0a27680b75ae7e34be0fdea8dfa7621dad231749f89b88f5aadfa362f9f78732a103822eb221a7265a6ff5e6ce82335af3af26c844fb589423c435c32dcac4761fb7fd88f930382706bef96cdb9001adc3c06b3346cc81ebe181192928d0087cf683ba92faf14d705cee321ae72c5c7d3cf73261a8006aa1c9eefdc453da63c2f8bfd07096041542956e7dfedc67115fff90ef97d209254676a9a840c2571dfc5fa6c18ad72a18bf5a9e4b9f59410732f7e0071836c048cb469d9d65a319712417bdbe8e60ced3ff06a0d22a64ce2d99ee1f95609d3e7dd952628a483f8bcebf735a8720f2829b5e67fb05bb749665e0e2805936bb62a7875a1e67b07ff14bcf8fab536c82d22111f6b71022d5ab530c6806bf68ba726c032b8d924ea5e12002656564b232ebbcc13dc0e84921e8e17ef6739abb9eded586d1ac4694e9e4a6bf45fe7fdc14bd12a89e4f0b4fe0fc1a533cc9399b2512255dbed3e36ef23757fd59b521433a4235653aa918e73a48d93e245fc2d96d85fe1597d38fab74477b22690647fc66993b76dc48828cd6a34b017759bd0816829d6de0a29d8008aad822fc6316062fe998346b8728df8e0c69e925edfce484d60d74b3ac96c08895d1fc2d960815fe5be561fb49eb328613b09c4fb115a991313c87c894e0dfc49c5f103078bda4d263343aafebbb5d0da7e151138bc03457485942b6ba3078081452020b698ce5d8433d8ef7b23d6c3f6923ec298a23f848cb465b1580b5cdfe3ce56d8e60c304de851ab0a73a51a9cddfa731d6c6da2b362a6e397ecb452506869996ae7ec5eb18160bcb54055283ccbc5d475f5f34d8d88aabaa08360ffb330e48257aa5d4af4aa446e36c9d7bc2165555042071ff1adfc238df44dd0c12dfc27b7a42a68d75fa14ac58848dba5d2da7a16ed190ce8cf7bf2d5e3b110cb0569b196bb974e2b7384fa9a32cd90e781009589ce367965cd3b0d479b584b050b09789606de080f7d6d1466962e6c67eede5120df460f8b11569fcae50f90e3f0cead5a95c2022abaea673d2f64592bd47d6fc5fa0200f90adf8a9aae4582b7eb42ba440f7d416975f6f07b4e0015989b910474ae21282c3a6210e842c9418e085b08e3baae81984c61ccb4cfce8ab199c2bd5d48c24c061425c5f6c13328390349c9e1a8c5de6cdadd188d6348486b9bb6b677b1708b4804ec09d65e9bbb5d275188bedf2b2ccb6abf99ba2611959e4a6871bb02b3a0d8e21b6a77270ffeb21a43657bb6a852331059c8375a02d272dfac14071eedc622b53cf9b7d05cb21a442d367e76c516ce24a0968ccad4661ecad71ef5534f21007c95dad68760f4800b06806b25205abd09e08150e23ce6ceb9989d5adbf30b9ed7cd4e6de3df2913ac568077c133b5c5e4a50dfd8f7d386e5e258eb4c021a28392d4b14537493c59a6820f8f8c2b7263e79462c15310c37b98a1e14c92ef4b99a6e6ce4bb6077c2e21e8b0c74e0eb28801e8b820ace18c69ef4354dddecbf92aab502a393e1ddc86fb5fc3b064c4ac893c477970e58ce8f903715edb1a54d923d1507143e9065fc8fce0e6e72e4a3ed8dc48b4f94182727f43c9905b57716aa1582f255b02217e757208cf4aa11ef3feb143c674eadc2a8b9014b682e8145b05a5b74d50241e6532db39358eff0b3c77b425f9aef82574eee60a01ac747a12a446cf5b47102bd4195faf5966afa08a25aac10411a05f2d15e55056d2723511f8b93d7e85aec2fe04cad140417544ca6b402282d6b6bf750bfe267d7d90ce1c8531e78af1aea0384dd81fbc3a5c1e4d16188d6ef402d820cd6a4c0bddb605913faef4dbfe29ae25de750147e82aaaeeb8f6cb4d646a226f5afc7319801d5d89d3de91b3ad204dc57d389cadea9fe0f6b405128d49ad9749a0f45b25bdc265cda768b6d217b66834d44bbdb56e586bbe4f1ad1dbbf440eaefb6a015585085666794aed20f7c293008aca5cad4af9e909a70314d3f5199cd308382f56081ced250824873a97a813152dc569f65f58c67125d2ce44a0a87c89f0f991a0f6ff7a534153cdfc484aa382ac306ec8e0d791458d63e0797158a5ba1e81d16a6c2a50797c4115383b219f1147595adc1d7ad47822427174c8888135ddb0eed85f2f3b678f9839da632378d9c92934a4f432b78c3135d86445d614cef314e7051f798d1ec9bbe363f664f7683bc3eab730fe10c2ab202055ce3b106cdf67126c13eb3649c6863539313383461bb18cfadac3c3137e88ec9f432a58ac1392b7517e1c42648998c657c492e9f0f03303eaa1d934d9b53bcb88253889e3dd862d0a585da3f56525e91d81b6c03cc0e42ad8a393bade7852031dddd94efcffde2f3a8c16f303b5073d5e1202e613de67fbdfcadcb966514f9df82014910c28af244510b421fa528654023da7083586e1e078df313e532f9a18b74ddacd22d675c0ba205242429dac893b8ba2c71b3c17412c0b7b1e5f3ab0078a23174c1aa15c1fddc421d5ea1de98fd198e6fdb41116f66dd76a6bb32ba581e8d298a857bfc33ae1196e555bd2f0811f8461aa2e1ea26e5db4c003a2c98ab0050445921d4d9c2abd396600097bd89eb5f481292537a0a753d158b59189e9191bfff0b89f34423efa9ba8d058555603de3de3529674235ee1ad8c69587d1707ba5aacb3a75b4c4ed1a0b76a7478aa17c9a1d36e5868eece1535033c6cec30734d87a4262b39340daae5f12d9ebd1a15a03e1baebc358c7c19ca6d0da708c78486fbb95c9718398da9a2209a50cf1821b5ae98496547d664929d7c627115245203563c45f3af8837757135a7a79e1ccb1079d0eb47fd33231ba4096bf955a2807e551875df535b7d5938e8901673b1faaf32463c69e00b526f269aa30bbcdc3e307a0560feada2c7ed6d41bdbd16e9a1da33862b54982e9c1bc8baa3d2bfb37a02782a2bb8bfe", 0xc68, 0xf399}, {&(0x7f00000015c0)='\n', 0x1}, {&(0x7f0000001600)="b4", 0x1}, {&(0x7f0000001700)="ec", 0x1, 0x80000001}, {&(0x7f0000002700)="eb", 0x1}], 0x0, 0x0)

[  740.992347][ T3560] usb 4-1: new low-speed USB device number 4 using dummy_hcd
17:55:10 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x280200, 0x0)

17:55:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fremovexattr(r0, &(0x7f0000000280)=@known='system.advise\x00')

17:55:10 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  741.259141][T13523] loop4: detected capacity change from 0 to 264192
[  741.352332][ T3560] usb 4-1: unable to get BOS descriptor or descriptor too short
17:55:10 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

[  741.412382][ T3560] usb 4-1: unable to read config index 0 descriptor/start: -71
[  741.420416][ T3560] usb 4-1: can't read configurations, error -71
17:55:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x4c01, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r2, 0x89a0, &(0x7f0000000040)={'wlan0\x00', @ifru_data=0x0})
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xffff)
r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x802)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0))

17:55:10 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

17:55:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x37fe0}}, 0x0)

17:55:10 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x4400)

17:55:10 executing program 4:
r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)

17:55:10 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:10 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x4c01, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r2, 0x89a0, &(0x7f0000000040)={'wlan0\x00', @ifru_data=0x0})
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xffff)
r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x802)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0))

17:55:11 executing program 1:
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000009000)={0x0, 0x0, 0x0}, 0x0)
io_setup(0x0, &(0x7f0000009040))

17:55:11 executing program 0:
r0 = syz_io_uring_setup(0x780a, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r1, 0xffffffffffffffff], 0x2)

17:55:11 executing program 4:
syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x40)

17:55:11 executing program 3:
syz_mount_image$f2fs(0x0, &(0x7f0000002600)='./file0\x00', 0x0, 0x1, &(0x7f0000002840)=[{&(0x7f0000002740)='\b', 0x1}], 0x0, 0x0)

17:55:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x4c01, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r2, 0x89a0, &(0x7f0000000040)={'wlan0\x00', @ifru_data=0x0})
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0xffff)
r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x802)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0))

17:55:11 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:11 executing program 1:
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000001580)=[{0x0}], 0x0, &(0x7f00000004c0)={[{@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@discard}], [{@subj_type={'subj_type', 0x3d, '+'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8004}}]})

17:55:11 executing program 4:
syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0xa0c102)

17:55:11 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = getpgrp(0xffffffffffffffff)
sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0)

17:55:11 executing program 3:
epoll_create1(0xcb770ef9793102cf)

17:55:11 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000240), 0x4)

17:55:12 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  743.161741][T13567] FAT-fs (loop1): Unrecognized mount option "subj_type=+" or missing value
17:55:12 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:55:12 executing program 3:
clock_gettime(0x0, &(0x7f0000003f80))

17:55:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002080))

17:55:12 executing program 1:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@remote, @dev, @void}, 0x0)

17:55:12 executing program 5:
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffff9)

17:55:12 executing program 0:
syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="dcb749a406", 0x5, 0x4}], 0x0, 0x0)

17:55:12 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7}, 0x7)
write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7}, 0x7)

17:55:12 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000008dc0)={&(0x7f0000008c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000008d80)={&(0x7f0000008c40)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0)

17:55:12 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:12 executing program 1:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

17:55:13 executing program 5:
lsetxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

17:55:13 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0)
clock_gettime(0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000025c0), 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f00000028c0)={[{@fastboot}], [{@obj_user={'obj_user', 0x3d, '\'@[#@^$]#\xaa&-^\'&'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x30, 0x0, 0x34, 0x0, 0x62, 0x62], 0x2d, [0x0, 0x30, 0x64, 0x30], 0x2d, [0x32, 0x0, 0x0, 0x32], 0x2d, [0x62, 0x1, 0x34, 0x62], 0x2d, [0x62, 0x0, 0x0, 0x64, 0x39, 0x34, 0x36]}}}, {@seclabel}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, 'syztnl2\x00'}}]})

17:55:13 executing program 3:
socketpair(0x18, 0x0, 0x0, &(0x7f00000087c0))

17:55:13 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})

17:55:13 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x6000000}, {0x6}]})

17:55:13 executing program 5:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

17:55:13 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:13 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x6, 0x2, {0x0, 0xffffffffffffffff}}}], 0x30}, 0x0)

17:55:13 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x25}, {0x6}]})

17:55:13 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x1c}, {0x16}]})

[  744.861266][   T24] audit: type=1326 audit(1640541313.800:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13605 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
17:55:13 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3800000000000000010000000100000013"], 0x38}, 0x0)

17:55:13 executing program 1:
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000001580)=[{&(0x7f00000003c0)='z', 0x1}], 0x0, &(0x7f00000004c0)={[{@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, 'Q\\'}}]})

[  745.217127][   T24] audit: type=1326 audit(1640541314.160:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13616 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e95549 code=0x0
17:55:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x37fe0}}, 0x0)

17:55:14 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:14 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000080)=@framed={{}, [@ldst, @exit, @initr0, @ldst, @call, @ldst]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x94, &(0x7f0000000140)=""/148, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x2, 0xc8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)}, 0x5c)

[  745.343707][   T24] audit: type=1326 audit(1640541314.250:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13615 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6f27549 code=0x0
[  745.450763][T13622] FAT-fs (loop1): Unrecognized mount option "smackfsdef=Q\" or missing value
17:55:14 executing program 5:
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}, 0x3, [{0x0, 0x0}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x0, 0x0}]})

17:55:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x0)

17:55:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x14, 0x0, 0x101}, 0x14}}, 0x2404c8c0)

17:55:14 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000001200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)

17:55:14 executing program 0:
socket$inet6(0xa, 0x0, 0x10001)

17:55:15 executing program 3:
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002700)={0xffffffffffffffff, 0x0}, 0x20)

17:55:15 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', 0x0})

[  746.162260][ T3567] usb 6-1: new low-speed USB device number 8 using dummy_hcd
17:55:15 executing program 0:
syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x100000000}], 0x0, 0x0)

17:55:15 executing program 4:
socket(0x20, 0x0, 0x0)

[  746.522924][ T3567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  746.534074][ T3567] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
17:55:15 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40400)

17:55:15 executing program 1:
syz_open_dev$usbmon(&(0x7f00000001c0), 0x9, 0x200000)

[  746.872263][ T3567] usb 6-1: string descriptor 0 read error: -22
[  746.878884][ T3567] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.40
[  746.888353][ T3567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.013279][T13632] raw-gadget gadget: fail, usb_ep_enable returned -22
[  747.040882][ T3567] usbhid 6-1:1.0: can't add hid device: -22
[  747.047559][ T3567] usbhid: probe of 6-1:1.0 failed with error -22
[  747.243011][ T3560] usb 6-1: USB disconnect, device number 8
17:55:16 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6}]})

17:55:16 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:16 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000005600), &(0x7f0000005640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005b80)={[], [{@smackfshat}]})

17:55:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setstatus(r0, 0x4, 0xc2800)
fcntl$setstatus(r0, 0x4, 0x0)

17:55:16 executing program 3:
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x800)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

17:55:16 executing program 4:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000c40))

[  748.158481][T13666] tmpfs: Unknown parameter 'smackfshat'
17:55:17 executing program 1:
syz_mount_image$f2fs(&(0x7f00000025c0), &(0x7f0000002600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@whint_mode_fs}, {}, {@fastboot}, {@four_active_logs}, {@noinline_data}], [{@obj_user={'obj_user', 0x3d, '\'@[#@^$]#\xaa&-^\'&'}}, {@fsuuid={'fsuuid', 0x3d, {[0xe, 0x62, 0x30, 0x39, 0x34, 0x37, 0x62, 0x62], 0x2d, [0x39, 0x30, 0x64, 0x30], 0x2d, [0x32, 0x36, 0x38, 0x32], 0x2d, [0x62, 0x1, 0x34, 0x62], 0x2d, [0x62, 0x65, 0x30, 0x64, 0x39, 0x34, 0x36, 0x62]}}}, {@uid_eq}, {@seclabel}, {@appraise_type}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, 'syztnl2\x00'}}]})

17:55:17 executing program 3:
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x3, &(0x7f0000001580)=[{&(0x7f00000003c0)='z', 0x1}, {&(0x7f0000001740)="05", 0x1}, {&(0x7f0000001780)="7a88e2e9c5d98acf6358ce3d36121990de17b15b8e660ba67478fd358d10d5d62a35f4d5ef761fbb3fa9be2172889f2f35bbc6dbcb04337f8997cfe675962fad8708fa75e5c394c9ded71a9217e45f5a2fe6613031fc9f3f6c9a22f02ccc4070c4ece08f16eb9d7d03469f3fdcbf89d8e3850ab103e5fb5b934795ce49bb093769cc9f48cd659f81c00ac52e73cd00deea9f2914f650f12968c3fb191f242f95d8b32a8d831a07064f286cad7e0b7a3523d254294ad49e197de4675ee2c5ceb2bb59ac137e6afaddd753416530e8abed0008e8549d76c660012b", 0xda, 0x5}], 0x0, 0x0)

17:55:17 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='O\x00'/13, @ANYRES32]})

17:55:17 executing program 0:
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000100))

17:55:17 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  748.616895][   T24] audit: type=1326 audit(1640541317.560:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13669 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eac549 code=0x0
17:55:17 executing program 5:
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f757365725f78617474722c757365725f786155ad695cbe1ae47474722c6e6f61636c2c61636c2c6e6f757365725f78617474722c61636c2c6e6f61636c2c6e6f61636c2c757365725f78617474722c646566636f6e746578743d", @ANYBLOB=',defcontex'])

17:55:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)={0x14, 0x0, 0x4}, 0x14}}, 0x0)

17:55:18 executing program 3:
add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffff9)

17:55:18 executing program 0:
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)

17:55:18 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$BLKROTATIONAL(r0, 0x4c03, 0x0)

17:55:18 executing program 5:
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
creat(&(0x7f0000009040)='./file0\x00', 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

17:55:18 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:18 executing program 1:
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0)

17:55:18 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x7}, 0xc, &(0x7f0000000100)={0x0, 0xa4}}, 0x0)

17:55:18 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

17:55:18 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00'})

17:55:19 executing program 1:
creat(&(0x7f0000009040)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f000000fe80)='net/rt_acct\x00')
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000010540)='net/icmp\x00')

17:55:19 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x0, 0x0, 0x0, 0x0, 0x44, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)

17:55:19 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:19 executing program 3:
openat$vcs(0xffffffffffffff9c, &(0x7f00000012c0), 0x181082, 0x0)

17:55:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x6, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0)

17:55:19 executing program 5:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)

17:55:19 executing program 1:
bpf$OBJ_GET_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10)

17:55:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002800)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000027c0)={&(0x7f00000026c0)={0x14, 0x0, 0x101}, 0x14}}, 0x0)

17:55:20 executing program 4:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc539, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}})

17:55:20 executing program 0:
clock_gettime(0x0, &(0x7f0000008ec0))

17:55:20 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:20 executing program 5:
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:55:20 executing program 1:
bpf$OBJ_GET_PROG(0xe, 0x0, 0x0)

17:55:20 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = getpgrp(0xffffffffffffffff)
sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x0)

17:55:20 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

17:55:20 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:21 executing program 5:
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

[  752.032296][ T3567] usb 5-1: new high-speed USB device number 6 using dummy_hcd
17:55:21 executing program 3:
setgroups(0x2, &(0x7f0000000bc0)=[0x0, 0xffffffffffffffff])

17:55:21 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

17:55:21 executing program 0:
syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x1, &(0x7f00000027c0)=[{0x0, 0x0, 0xf399}], 0x0, &(0x7f0000002880)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]})

[  752.292262][ T3567] usb 5-1: Using ep0 maxpacket: 8
[  752.527049][ T3567] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  752.538293][ T3567] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  752.549641][ T3567] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  752.579017][T13753] loop0: detected capacity change from 0 to 243
[  752.626401][T13753] erofs: Unknown parameter 'rootcontext'
[  752.742431][ T3560] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  752.804563][ T3567] usb 5-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40
[  752.813975][ T3567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.822347][ T3567] usb 5-1: Product: syz
[  752.826649][ T3567] usb 5-1: Manufacturer: syz
[  752.831371][ T3567] usb 5-1: SerialNumber: syz
[  753.107308][ T3560] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  753.203334][ T3567] usbhid 5-1:1.0: can't add hid device: -22
[  753.212789][ T3567] usbhid: probe of 5-1:1.0 failed with error -22
[  753.237279][ T3567] usb 5-1: USB disconnect, device number 6
[  753.352379][ T3560] usb 6-1: string descriptor 0 read error: -22
[  753.358941][ T3560] usb 6-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40
[  753.368269][ T3560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.422179][ T3560] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[  753.626296][ T3560] usb 6-1: USB disconnect, device number 9
17:55:22 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:22 executing program 0:
syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000009000))
syz_open_procfs(0x0, &(0x7f000000fe80)='net/rt_acct\x00')
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000010540)='net/icmp\x00')

17:55:22 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)

17:55:22 executing program 1:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x123043, 0x0)

17:55:22 executing program 4:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)

17:55:22 executing program 1:
rename(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00')

17:55:22 executing program 0:
mount(&(0x7f0000000440)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000004c0)='cpuset\x00', 0x0, 0x0)

17:55:22 executing program 3:
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='lazytime\x00', 0x0, 0x0)

17:55:23 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

17:55:23 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:23 executing program 4:
socketpair(0x1d, 0x4, 0x0, &(0x7f0000000000))

17:55:23 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280)={0x2}, 0x2)

17:55:23 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'caif0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x81000000, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0)

17:55:23 executing program 3:
r0 = socket(0x2, 0xa, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

17:55:23 executing program 5:
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x2002b00, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdefdfffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}})
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
exit_group(0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  754.736205][T13774] can: request_module (can-proto-0) failed.
17:55:23 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001880)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000001e00), r0)

17:55:23 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0xffff, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

17:55:23 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

17:55:23 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
r3 = dup2(r1, r2)
sendmsg$inet_sctp(r3, &(0x7f0000000440)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c"], 0x2c}, 0x0)

17:55:24 executing program 5:
syz_open_dev$dri(&(0x7f0000000000), 0xbc, 0x8040)

17:55:24 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

17:55:24 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x10, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
connect$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

17:55:24 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_dccp_buf(r0, 0x29, 0x33, 0x0, 0x0)

17:55:24 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:24 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)

17:55:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:24 executing program 0:
unshare(0x48000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000879000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  755.698732][T13811] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de
17:55:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00'})

17:55:24 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000000)=@generic={0x0, "c812dc96a6b7db6b78752daec450ada453b5b32b57c5e57eca0ea9377143966c89710cb499599a21a013def98e3b0335eaeeac5c996e567228c5ae7de882f589dc40b2f3dceb04a7d85eeb803d35800123e14e1a2bca0811a09c68a0bfaeed07ea0ea22bdaf4f45ddff3f9ed4645ac0db2056e33f98159c7760258e79ef4"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="94", 0x1}], 0x1}, 0x0)

[  755.978894][T13818] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:25 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:25 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000180)=""/4096, 0x36, 0x1000, 0x1}, 0x20)

17:55:25 executing program 4:
pipe(&(0x7f0000000ec0)={<r0=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000bc0))

17:55:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:25 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x6)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c)

17:55:25 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000013640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2041, 0x0)

17:55:25 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:25 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @any, 0x8ea}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe)
sendmmsg(r0, &(0x7f0000000b80), 0x40002d2, 0x0)

[  756.976909][T13837] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:26 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

17:55:28 executing program 0:
unshare(0x48000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000879000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:55:28 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

17:55:28 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:28 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48)

17:55:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  759.376667][T13857] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:28 executing program 1:
unshare(0x48000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000879000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:55:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

17:55:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000025000f0005ffffffbd0301000000000095002000000000006916000000000000bf6700000000000017060000b964b0fd4506feff00200000540600000fe60000bf150000000000000f6500000000000074070000020000002c030000000000001f75000000000000bf540000000000000700000004000000ad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27dfef618ecf264e0f84f9f1023c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f633a9a4f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a05000000c6c3f0e306f18635613a9ac60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede202fa4e0a2127b8b83c71a51445dc8da39e5b0ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552444ebdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445b13d0045dc3cdaa673a6bb55d8c85f21dc339fb5b74fe431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ebf0bd9d42ca019dd5d03fcf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690882f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000003d80bd56a57fca2b82f639601ae899a53f6715a0a62a29ab028acfc1cb24a0f6a5480a55d638a0c544ba0dc828c22fe3000071c252021e0a60a800000000000000437d57fcf8295f63a70837f5cd4e5e779b4522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523f9e37b1fbd74a6a40e4acb1ac693a27051f2ab759b8dbe8439db2a0426c7e7c0032028c95b29b6ddb551176693a921c76beceff7e4fbfea5011af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b77d6e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d9174138c820cfeb73dec68ed56b5d3d0500000071ad79000000000000000000000000000000dd434a25e9950ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c716d906fbc539b412e0478cfee4485f423c63f49db43833c92eeeb647e92c0cfc1f1eabbbd9987c4ebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c4000000000000000000000000000000000070ae36bf40a7a92984a4b6f5aa7ccc563c2996a266d1fa7c9fad0b259359e258b2236e9fd140ec49be4b1611d9fdfa0dff720b56dc6837fcfaba6975ddd6c94c510d89d2364f2e0c22451cca67618fa53e372e5e0188e14f507d0ab5805d36efd28cc021ddf36099a2c058b2c889c23ce0661a481e3a2a7776088712b4dee3cf2d2ccadcb0af7d15b55cd059397e25eeb7cf88a8cabe963cc98c42aff2829087239b3f93f34bc8d159ef89e1d889a7b4f3fe0de3951d416ed5a1b792129a4ab1202ce4db9a9b6212c957f357c1b8b03f57f4f60ad1d2fb8bafe6ff7c6071e5e6c2288e5ddcd88511875e544e16d42f151d93639a8e9e57a39e47ac1b579be308b7dbfcde97d61b6061108a6445a0d9a32be0910ca014a680268cc94766382cfd0e3c7f6c645a47737bbd220e0000000000003e186d6caef3d6365ade316c436ee88bc4ef0e60e9051e5dfaa68460c153fb208a91c69f4e6f"], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

17:55:28 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

[  760.432856][T13883] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:29 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  760.741408][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
17:55:32 executing program 0:
unshare(0x48000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffff3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000879000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/1, 0x201000, 0x1000}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:55:32 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:32 executing program 4:
socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x52)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="375762a2fd0da707c4d85435aba8ca358473f0758f0ac7fc96110ccbccc9db7a9f734780b5d70342a99db4132693b56bb32ff0e347bda5b1ea2e0cd1ae4b7308cc37c300c53caf35fb3291a342e5", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB], 0xa8}, 0x40002162)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005f40)='tasks\x00', 0x2, 0x0)

17:55:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:32 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

17:55:32 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r0 = open$dir(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0)
renameat(r1, &(0x7f00000001c0)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00')
r2 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
linkat(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

[  763.749303][T13895] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:33 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:33 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  764.457080][T13909] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:33 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000001500), &(0x7f00000015c0)=0x90)

[  764.574774][T13896] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
17:55:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:33 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c)

[  765.023357][T13920] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:35 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

17:55:35 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:35 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:35 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockname$inet(r0, 0x0, &(0x7f00000000c0))

17:55:35 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r0], 0x44}}, 0x0)

17:55:35 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000001600)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000100), &(0x7f0000000140)=0x18)

17:55:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)

17:55:36 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r0], 0x44}}, 0x0)

17:55:36 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:36 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:36 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:36 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp, 0x0, 0xc802, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x25b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0)
sendmmsg$sock(r2, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001580)="6ed853b5a65aa2c9c93e3957508ad177", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003080)='e', 0x1}], 0x1}}], 0x2, 0x0)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=ANY=[], 0x20c}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340)="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", 0x793)

17:55:36 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r0], 0x44}}, 0x0)

17:55:36 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:36 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:36 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, 0x0, 0x0)

17:55:37 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {0x2f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:37 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:37 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:37 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x10}, 0x98)

17:55:37 executing program 4:
openat(0xffffffffffffff9c, 0x0, 0x348002, 0x0)

[  768.785179][T13980] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:37 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:37 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:38 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:38 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x3, 0x0, @ioapic})

17:55:38 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0xc0ed0000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

[  769.418960][T13992] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:38 executing program 1:
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:38 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:38 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:38 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10)
sendto$inet(r0, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x20000000)

17:55:38 executing program 1:
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

[  769.969936][T14008] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:39 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil})

17:55:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:39 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  770.485446][T14022] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:39 executing program 1:
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:39 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0)

17:55:39 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

17:55:39 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:40 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:40 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

[  771.125205][T14031] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:40 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x891a, &(0x7f00000044c0)={'macvlan1\x00', @ifru_mtu})

17:55:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:40 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000005c0)={0x0, 0x4, &(0x7f00000001c0)})

17:55:40 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:40 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:40 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  771.750373][T14047] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:40 executing program 4:
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)

17:55:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:41 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0xce002)

17:55:41 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:41 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:41 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$tun(r0, 0x0, 0x0)

17:55:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:41 executing program 0:
mincore(&(0x7f0000ff8000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/225)
mlock(&(0x7f0000dc9000/0x1000)=nil, 0x1000)
mlock(&(0x7f0000f2d000/0x4000)=nil, 0x4000)

17:55:41 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:41 executing program 4:
shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x9, 0x40, 0x9, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4}]})

17:55:41 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:42 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:55:42 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:42 executing program 0:
pipe2(0x0, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
sync()

17:55:42 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:42 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x7002, 0x0)

17:55:42 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:42 executing program 0:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
connect$caif(r0, &(0x7f0000000040)=@rfm={0x25, 0x0, "b57f8a5133f0a6d3c666a4ab3b18432e"}, 0x18)

17:55:42 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

17:55:42 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:42 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/219)

17:55:42 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:43 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

17:55:43 executing program 0:
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x48031, 0xffffffffffffffff, 0x0)

17:55:43 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:43 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:43 executing program 4:
unshare(0x40000000)
unshare(0x42060000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)

17:55:43 executing program 0:
socketpair(0x11, 0xa, 0x0, 0x0)
sync()

17:55:43 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

17:55:43 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:43 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:43 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:44 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

17:55:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:44 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x8008700b, &(0x7f0000000000))

17:55:44 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:44 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:44 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

17:55:44 executing program 4:
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x4241)

17:55:44 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:44 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x40030000000000)

17:55:44 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:45 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

17:55:45 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:45 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x2, 0x0, 0xd7, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:45 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:45 executing program 0:
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x9, 0x4)
bind(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x48)
sendto$inet(r0, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9280a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

17:55:45 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0)

17:55:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:46 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e0000001c008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

17:55:46 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:46 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0)

17:55:46 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

[  777.572923][T14171] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.4'.
17:55:46 executing program 4:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902a0a3727b000000090400000149284800090500000000000000070589cf"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

17:55:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0)

17:55:46 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  777.962704][   T24] audit: type=1326 audit(1640541346.900:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14180 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
17:55:47 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:47 executing program 0:
clock_gettime(0x3, &(0x7f0000000000))
semget(0x0, 0x2, 0x603)

17:55:47 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500"], 0x44}}, 0x0)

17:55:47 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  778.622442][ T3567] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  779.002314][ T3567] usb 5-1: config index 0 descriptor too short (expected 41888, got 34)
[  779.013221][ T3567] usb 5-1: config 123 has too many interfaces: 114, using maximum allowed: 32
[  779.020854][T14196] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
[  779.023347][ T3567] usb 5-1: config 123 has 1 interface, different from the descriptor's value: 114
[  779.040070][ T3567] usb 5-1: config 123 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  779.050984][ T3567] usb 5-1: config 123 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  779.062282][ T3567] usb 5-1: config 123 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  779.072495][ T3567] usb 5-1: config 123 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  779.085855][ T3567] usb 5-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff
17:55:48 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

[  779.095197][ T3567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:55:48 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001340)="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", 0xd02}], 0x1}}], 0x1, 0x4008040)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000)

17:55:48 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500"], 0x44}}, 0x0)

17:55:48 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  779.550109][   T24] audit: type=1326 audit(1640541348.490:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14199 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
[  779.845514][T14207] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
[  779.907791][ T3567] ldusb 5-1:123.0: Interrupt out endpoint not found (using control endpoint instead)
[  779.998067][ T3567] ldusb 5-1:123.0: LD USB Device #0 now attached to major 180 minor 0
[  780.126834][ T3567] usb 5-1: USB disconnect, device number 7
[  780.160326][ T3567] ldusb 5-1:123.0: LD USB Device #0 now disconnected
17:55:49 executing program 4:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/cgroup\x00')

17:55:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500"], 0x44}}, 0x0)

17:55:49 executing program 0:
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='namecase=1,errors'])

17:55:49 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900))

17:55:49 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  780.823268][T14216] exfat: Deprecated parameter 'namecase'
[  780.829091][T14216] exfat: Bad value for 'errors'
[  780.856767][   T24] audit: type=1326 audit(1640541349.800:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14212 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
[  780.930780][T14217] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:50 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:50 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:50 executing program 0:
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='namecase=1,errors'])

17:55:50 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x5}, {0x3}, {}, {}, {}, {}, {}, {}, {}]})

[  781.538481][T14229] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
[  781.631992][T14235] exfat: Deprecated parameter 'namecase'
[  781.637835][T14235] exfat: Bad value for 'errors'
17:55:50 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(0x0, &(0x7f00000018c0), &(0x7f0000001900))

17:55:50 executing program 4:
syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x81)
syz_emit_ethernet(0xd3, 0x0, &(0x7f0000000140)={0x0, 0x0, [0x3bf, 0x142, 0x10f, 0x3ba]})
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1000000000000000, 0x103380)
syz_emit_ethernet(0x1017, &(0x7f0000000780)={@broadcast, @link_local, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x1}}, {@llc={0x4, {@llc={0xfc, 0x7e, "d9", "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"}}}}}, &(0x7f0000000040)={0x1, 0x3, [0x776, 0xf7f, 0xbc7, 0x9b5]})
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
syz_emit_ethernet(0xd7, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@val={0x9100, 0x2, 0x0, 0x4}, {0x8100, 0x6}}, {@llc_tr={0x11, {@llc={0xaa, 0x4, '2', "c533ed17a46754d2059e7217593425bb08e074694491005dbc36ee4e0864226f5229707f0d66340444e8c3caaf49db5f410b8283a1b70e1d20cafe422e7af963b734c33bf0d02da0b399aca21c82451a7916fc0a392b7e433cc4ed6c5b77eb3323d0cba467f6da165eae6782ad03ea43afb9b41736c833f44957473f715c765fc9815d679931d52a4c1c0de29acf3377dbfe8112a503caf23fc0f8daff9cb43357be20bbd82b79c9d3cd6e675de8d5001173959d0a4919a567acd2f3fa03"}}}}}, 0x0)
fcntl$addseals(r0, 0x409, 0x2)
pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="3ff1988c1f4c7dd519d2e225f328cc650aa8aad9c2eeb6c313fbda7c9a42db0171", 0x21}], 0x1, 0x81806, 0x5)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
syz_emit_ethernet(0x28, &(0x7f00000000c0)={@local, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "95", "7c6917", 0x1c, "d6a8d4550575135e7849d2219dac0f5775f2"}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x85c, 0x6bc, 0x2e1, 0x36d]})
sendfile(r4, r1, 0x0, 0x24002da8)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

17:55:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:50 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:50 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002840)={0x44, 0x0, &(0x7f0000002700)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

17:55:50 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  782.195100][T14245] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(0x0, &(0x7f00000018c0), &(0x7f0000001900))

[  782.366965][T14247] binder: 14244:14247 ioctl c0306201 0 returned -14
17:55:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32], 0x44}}, 0x0)

17:55:51 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000004d80), 0x4000000000000e5, 0x4000bb8)

17:55:51 executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/cgroup\x00')
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)

17:55:51 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:51 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:55:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(0x0, &(0x7f00000018c0), &(0x7f0000001900))

[  782.839465][T14255] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:55:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x44}}, 0x0)

17:55:52 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="def57129062d73ffac28e39107510c8a4489307459760ca89f5f1bc8f44d3f0325e34945601f590cc8eccb92f78592c804935235f9aaecc167fd6e84a0ba7cd12eeee327ebae58701bf42a597722e0d2"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002840)={0x80, 0x0, &(0x7f0000002700)=[@acquire, @clear_death, @decrefs, @enter_looper, @increfs_done, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

17:55:52 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:52 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), 0x0, &(0x7f0000001900))

17:55:52 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  783.403766][T14270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:52 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x44}}, 0x0)

17:55:52 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000004c0)="def57129"})

17:55:52 executing program 0:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})

17:55:52 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:52 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), 0x0, &(0x7f0000001900))

[  784.000830][T14283] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:53 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

17:55:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x44}}, 0x0)

17:55:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46002)
io_setup(0x1, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006}])

17:55:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x408c5333, &(0x7f00000000c0))

17:55:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), 0x0, &(0x7f0000001900))

17:55:53 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  784.557643][T14296] loop4: detected capacity change from 0 to 15
[  784.570472][T14295] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), 0x0)

17:55:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x44}}, 0x0)

17:55:53 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x84\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\x00\b\x00\x00\x00\x00\x00\x00\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xde\xb8_\xd4\x18,\f\xd4s\xb2\x99/\x16^\x02\xbf\xdb\xc0\x8b\x19\x17\xb7<\x84\xc5\x00Rvd\xcb:\b\x00\x00\x00\x00\x00\xe9\t\xfbY_\x1e.\x9b\xf4CSv\n\xfc\x82\x95\xaa8 p\xdfSE\xf4(0o\xfa)\xc7)B\xbf=\xd4D\x99ugf\xbe\xbd\x903\x93\xee\x90\x93\xdf\x13\x80\xdf\xd8\xe5\xb4\xb0\xf5\x15\x8fc\xe7\xa0\x9cG\xca\xd3\xe85\x7f\xd1*\xcd\xdc\xee\x02\xcd\xf4\xd3\x05N\xbfjpnnO}9\x0f:\x7f\x88J\xb4\xf9>b\xac2\tz\xf3c\xb0>9\xc9\trzKz\xa0\xd0I\x11\x9aP_\xa8\x94\xad\x95~\x17@K\x14:\xfd$\x80\xef\xb2\xed|t\x179%\x15\x14t-^\xdf\xe9~', 0x0)
sendfile(r1, r0, 0x0, 0x800040bf)

17:55:53 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:54 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x2f}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7f}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  785.252566][T14311] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:54 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), 0x0)

17:55:54 executing program 0:
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setown(r0, 0x6, 0xffffffffffffffff)

17:55:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x44}}, 0x0)

17:55:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000003c0)=<r1=>0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x46002)
io_setup(0x1, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006}])

17:55:54 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:54 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getresgid(&(0x7f0000001880), &(0x7f00000018c0), 0x0)

17:55:54 executing program 2:
io_setup(0xa, &(0x7f0000000080)=<r0=>0x0)
r1 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x0)
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

[  785.927250][T14322] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:54 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote}, 0x1c)

[  786.148006][T14327] loop4: detected capacity change from 0 to 15
17:55:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1], 0x44}}, 0x0)

17:55:55 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r3, 0x3dd0198cb0585301, 0x5000000, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x9effffff}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
preadv(r4, &(0x7f00000017c0), 0xe0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000), 0x80, 0x0}, 0x8000}], 0x1, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000140))
syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xe0, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'team0\x00', {}, 0x4})

17:55:55 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x16, 0x7, 0x0, 0x8ac, 0x0, 0x1}, 0x48)

17:55:55 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, 0x0)

[  786.594162][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373", @ANYRES32=r1], 0x44}}, 0x0)

17:55:55 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000040000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  787.294389][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  787.304266][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:56 executing program 4:
sched_rr_get_interval(0x0, &(0x7f0000000340))

17:55:56 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000580)={'icmp6\x00'}, &(0x7f00000005c0)=0x1e)

17:55:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000005240)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0)
bind$netlink(r0, &(0x7f0000000040), 0xc)

17:55:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="8a248b4fa9f3be6c87e1da2e77560a85", 0x10)

17:55:56 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000040000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373", @ANYRES32=r1], 0x44}}, 0x0)

17:55:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f00000001c0))

17:55:56 executing program 1:
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004600))

17:55:56 executing program 2:
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000040)={0x1b4, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001cb40))

[  787.958242][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  787.967793][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
17:55:57 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f000000dbc0), &(0x7f000000dc00)=0x4)

17:55:57 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xee00, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf800})

17:55:57 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000040000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:57 executing program 0:
syz_mount_image$tmpfs(&(0x7f00000039c0), &(0x7f0000003a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005300)={[{@size={'size', 0x3d, [0x38, 0x0]}}]})

17:55:57 executing program 2:
syz_mount_image$udf(&(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:55:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373", @ANYRES32=r1], 0x44}}, 0x0)

17:55:57 executing program 4:
syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@loccookie}, {@locktable={'locktable', 0x3d, '.%\\'}}, {@ignore_local_fs}], [{@smackfshat={'smackfshat', 0x3d, '[:-\\('}}]})

17:55:57 executing program 1:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0)

17:55:57 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:55:57 executing program 0:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x123081)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50}, 0x50)

[  788.676186][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  788.684644][T14381] ufs: ufs was compiled with read-only support, can't be mounted as read-write
[  788.685770][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  788.768305][T14384] gfs2: Unknown parameter 'smackfshat'
17:55:57 executing program 2:
syz_mount_image$udf(&(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:55:57 executing program 4:
syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440))

17:55:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c0002800800", @ANYRES32=r1], 0x44}}, 0x0)

17:55:58 executing program 1:
syz_mount_image$tmpfs(&(0x7f00000039c0), &(0x7f0000003a00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005300)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'discard'}}]})

17:55:58 executing program 0:
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
fork()

17:55:58 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  789.259908][T14392] ufs: ufs was compiled with read-only support, can't be mounted as read-write
[  789.377282][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  789.379904][T14399] tmpfs: Unknown parameter 'smackfsroot'
[  789.388578][T14396] gfs2: not a GFS2 filesystem
[  789.499717][T14401] not chained 490000 origins
[  789.504666][T14401] CPU: 1 PID: 14401 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0
[  789.513496][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  789.523581][T14401] Call Trace:
[  789.526885][T14401]  <TASK>
[  789.529833][T14401]  dump_stack_lvl+0x1ff/0x28e
[  789.534570][T14401]  dump_stack+0x25/0x28
[  789.538772][T14401]  kmsan_internal_chain_origin+0x78/0x110
[  789.544543][T14401]  ? kmsan_internal_chain_origin+0xa9/0x110
[  789.550494][T14401]  ? __msan_chain_origin+0xbf/0x140
[  789.555741][T14401]  ? sctp_chunk_fail+0x119/0x150
[  789.560811][T14401]  ? __sctp_outq_teardown+0x1155/0x15c0
[  789.566397][T14401]  ? sctp_outq_free+0x37/0x40
[  789.571115][T14401]  ? sctp_association_free+0x404/0x1250
[  789.576714][T14401]  ? sctp_do_sm+0x89ed/0x9b50
[  789.581433][T14401]  ? sctp_primitive_SHUTDOWN+0x175/0x1a0
[  789.587164][T14401]  ? sctp_close+0x80c/0x1050
[  789.591818][T14401]  ? inet_release+0x2fd/0x380
[  789.596553][T14401]  ? sock_close+0x150/0x450
[  789.601102][T14401]  ? __fput+0x7c4/0x10a0
[  789.605381][T14401]  ? ____fput+0x37/0x40
[  789.609573][T14401]  ? task_work_run+0x154/0x290
[  789.614370][T14401]  ? exit_to_user_mode_loop+0x3f0/0x490
[  789.619956][T14401]  ? syscall_exit_to_user_mode+0x7e/0xc0
[  789.625678][T14401]  ? __do_fast_syscall_32+0xa5/0xf0
[  789.630917][T14401]  ? do_fast_syscall_32+0x34/0x70
[  789.635985][T14401]  ? do_SYSENTER_32+0x1b/0x20
[  789.640701][T14401]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  789.647248][T14401]  ? arch_stack_walk+0x291/0x3c0
[  789.652219][T14401]  ? stack_trace_save+0x1a0/0x1a0
[  789.657280][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.662430][T14401]  ? kmsan_internal_set_shadow_origin+0x5e/0xc0
[  789.668718][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.673872][T14401]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  789.679729][T14401]  ? __genradix_ptr+0x9a1/0xc30
[  789.684751][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.689901][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.695055][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.700202][T14401]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  789.706049][T14401]  __msan_chain_origin+0xbf/0x140
[  789.711114][T14401]  sctp_chunk_fail+0x119/0x150
[  789.715932][T14401]  __sctp_outq_teardown+0x1155/0x15c0
[  789.721342][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.726502][T14401]  sctp_outq_free+0x37/0x40
[  789.731051][T14401]  sctp_association_free+0x404/0x1250
[  789.736479][T14401]  sctp_do_sm+0x89ed/0x9b50
[  789.741049][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.746218][T14401]  ? kmsan_get_metadata+0x33/0x220
[  789.751387][T14401]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  789.757262][T14401]  ? preempt_count_sub+0xf8/0x330
[  789.762350][T14401]  ? _raw_spin_unlock_irqrestore+0x78/0xb0
[  789.768195][T14401]  ? skb_dequeue+0x259/0x330
[  789.772871][T14401]  sctp_primitive_SHUTDOWN+0x175/0x1a0
[  789.778379][T14401]  sctp_close+0x80c/0x1050
[  789.782849][T14401]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  789.788791][T14401]  ? sctp_destruct_sock+0xa0/0xa0
[  789.794038][T14401]  inet_release+0x2fd/0x380
[  789.798592][T14401]  sock_close+0x150/0x450
[  789.802977][T14401]  ? inet_listen+0xb10/0xb10
[  789.807609][T14401]  ? sock_mmap+0x120/0x120
[  789.812067][T14401]  __fput+0x7c4/0x10a0
[  789.816198][T14401]  ____fput+0x37/0x40
[  789.820217][T14401]  ? fput_many+0x370/0x370
[  789.824672][T14401]  task_work_run+0x154/0x290
[  789.829313][T14401]  exit_to_user_mode_loop+0x3f0/0x490
[  789.834767][T14401]  syscall_exit_to_user_mode+0x7e/0xc0
[  789.840285][T14401]  __do_fast_syscall_32+0xa5/0xf0
[  789.845366][T14401]  do_fast_syscall_32+0x34/0x70
[  789.850281][T14401]  do_SYSENTER_32+0x1b/0x20
[  789.854849][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  789.861228][T14401] RIP: 0023:0xf6eac549
[  789.865322][T14401] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  789.884969][T14401] RSP: 002b:00000000ffa94ed0 EFLAGS: 00000286 ORIG_RAX: 0000000000000006
[  789.893425][T14401] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000002
17:55:58 executing program 2:
syz_mount_image$udf(&(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

[  789.901421][T14401] RDX: 0000000000000000 RSI: 00000000f6fe3000 RDI: 0000000000000000
[  789.909456][T14401] RBP: 00000000f700ec40 R08: 0000000000000000 R09: 0000000000000000
[  789.917463][T14401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  789.925462][T14401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  789.933469][T14401]  </TASK>
[  789.939722][T14401] Uninit was stored to memory at:
[  789.945309][T14401]  sctp_chunk_fail+0x119/0x150
17:55:58 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x18}, 0x48)

17:55:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c0002800800", @ANYRES32=r1], 0x44}}, 0x0)

[  789.950134][T14401]  __sctp_outq_teardown+0x1155/0x15c0
[  789.955666][T14401]  sctp_outq_free+0x37/0x40
[  789.960222][T14401]  sctp_association_free+0x404/0x1250
[  789.965751][T14401]  sctp_do_sm+0x89ed/0x9b50
[  789.970336][T14401]  sctp_primitive_SHUTDOWN+0x175/0x1a0
[  789.975944][T14401]  sctp_close+0x80c/0x1050
[  789.980414][T14401]  inet_release+0x2fd/0x380
[  789.985125][T14401]  sock_close+0x150/0x450
[  789.989510][T14401]  __fput+0x7c4/0x10a0
[  789.993725][T14401]  ____fput+0x37/0x40
[  789.997756][T14401]  task_work_run+0x154/0x290
[  790.002520][T14401]  exit_to_user_mode_loop+0x3f0/0x490
[  790.007945][T14401]  syscall_exit_to_user_mode+0x7e/0xc0
[  790.013595][T14401]  __do_fast_syscall_32+0xa5/0xf0
[  790.018680][T14401]  do_fast_syscall_32+0x34/0x70
[  790.023688][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.028243][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.034729][T14401] 
[  790.037063][T14401] Uninit was stored to memory at:
[  790.042265][T14401]  sctp_chunk_fail+0x119/0x150
[  790.047256][T14401]  __sctp_outq_teardown+0x1155/0x15c0
[  790.052774][T14401]  sctp_outq_free+0x37/0x40
[  790.057321][T14401]  sctp_association_free+0x404/0x1250
[  790.062852][T14401]  sctp_do_sm+0x89ed/0x9b50
[  790.067397][T14401]  sctp_primitive_SHUTDOWN+0x175/0x1a0
[  790.072992][T14401]  sctp_close+0x80c/0x1050
[  790.077457][T14401]  inet_release+0x2fd/0x380
[  790.082248][T14401]  sock_close+0x150/0x450
[  790.086630][T14401]  __fput+0x7c4/0x10a0
[  790.090746][T14401]  ____fput+0x37/0x40
[  790.094937][T14401]  task_work_run+0x154/0x290
[  790.099571][T14401]  exit_to_user_mode_loop+0x3f0/0x490
[  790.105186][T14401]  syscall_exit_to_user_mode+0x7e/0xc0
[  790.110716][T14401]  __do_fast_syscall_32+0xa5/0xf0
[  790.115969][T14401]  do_fast_syscall_32+0x34/0x70
[  790.120883][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.125592][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.132095][T14401] 
[  790.134430][T14401] Uninit was stored to memory at:
[  790.139526][T14401]  sctp_chunk_fail+0x119/0x150
[  790.144525][T14401]  __sctp_outq_teardown+0x1155/0x15c0
[  790.149951][T14401]  sctp_outq_free+0x37/0x40
[  790.154678][T14401]  sctp_association_free+0x404/0x1250
[  790.160108][T14401]  sctp_do_sm+0x89ed/0x9b50
[  790.164849][T14401]  sctp_primitive_SHUTDOWN+0x175/0x1a0
[  790.170360][T14401]  sctp_close+0x80c/0x1050
[  790.175070][T14401]  inet_release+0x2fd/0x380
[  790.179618][T14401]  sock_close+0x150/0x450
[  790.184092][T14401]  __fput+0x7c4/0x10a0
[  790.188216][T14401]  ____fput+0x37/0x40
[  790.192338][T14401]  task_work_run+0x154/0x290
[  790.196973][T14401]  exit_to_user_mode_loop+0x3f0/0x490
[  790.202491][T14401]  syscall_exit_to_user_mode+0x7e/0xc0
[  790.208044][T14401]  __do_fast_syscall_32+0xa5/0xf0
[  790.213219][T14401]  do_fast_syscall_32+0x34/0x70
[  790.218115][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.222748][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.229125][T14401] 
[  790.231460][T14401] Uninit was stored to memory at:
[  790.236668][T14401]  sctp_chunk_fail+0x119/0x150
[  790.241570][T14401]  __sctp_outq_teardown+0x1155/0x15c0
[  790.247093][T14401]  sctp_outq_free+0x37/0x40
[  790.251637][T14401]  sctp_association_free+0x404/0x1250
[  790.257156][T14401]  sctp_do_sm+0x89ed/0x9b50
[  790.261706][T14401]  sctp_primitive_SHUTDOWN+0x175/0x1a0
[  790.267304][T14401]  sctp_close+0x80c/0x1050
[  790.271768][T14401]  inet_release+0x2fd/0x380
[  790.276513][T14401]  sock_close+0x150/0x450
[  790.280889][T14401]  __fput+0x7c4/0x10a0
[  790.285095][T14401]  ____fput+0x37/0x40
[  790.289121][T14401]  task_work_run+0x154/0x290
[  790.293847][T14401]  exit_to_user_mode_loop+0x3f0/0x490
[  790.299272][T14401]  syscall_exit_to_user_mode+0x7e/0xc0
[  790.304889][T14401]  __do_fast_syscall_32+0xa5/0xf0
[  790.309971][T14401]  do_fast_syscall_32+0x34/0x70
[  790.314983][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.319539][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.326022][T14401] 
[  790.328358][T14401] Uninit was stored to memory at:
[  790.333540][T14401]  sctp_chunk_fail+0x119/0x150
[  790.338354][T14401]  __sctp_outq_teardown+0x1155/0x15c0
[  790.343864][T14401]  sctp_outq_free+0x37/0x40
[  790.348404][T14401]  sctp_association_free+0x404/0x1250
[  790.353912][T14401]  sctp_do_sm+0x89ed/0x9b50
[  790.358466][T14401]  sctp_primitive_SHUTDOWN+0x175/0x1a0
[  790.364450][T14401]  sctp_close+0x80c/0x1050
[  790.368921][T14401]  inet_release+0x2fd/0x380
[  790.373598][T14401]  sock_close+0x150/0x450
[  790.377983][T14401]  __fput+0x7c4/0x10a0
[  790.382191][T14401]  ____fput+0x37/0x40
[  790.386219][T14401]  task_work_run+0x154/0x290
[  790.390859][T14401]  exit_to_user_mode_loop+0x3f0/0x490
[  790.396371][T14401]  syscall_exit_to_user_mode+0x7e/0xc0
[  790.401976][T14401]  __do_fast_syscall_32+0xa5/0xf0
[  790.407060][T14401]  do_fast_syscall_32+0x34/0x70
[  790.412104][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.416663][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.423247][T14401] 
[  790.425590][T14401] Uninit was stored to memory at:
[  790.430683][T14401]  sctp_datamsg_from_user+0x1cc0/0x22b0
[  790.436377][T14401]  sctp_sendmsg_to_asoc+0x1366/0x1f90
[  790.441885][T14401]  sctp_sendmsg+0x3eaa/0x5460
[  790.446617][T14401]  inet_sendmsg+0x15b/0x1d0
17:55:59 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x16}, {0x6}]})

[  790.451170][T14401]  ____sys_sendmsg+0xe11/0x12c0
[  790.456168][T14401]  __sys_sendmsg+0x704/0x840
[  790.460812][T14401]  __ia32_compat_sys_sendmsg+0xed/0x130
[  790.466502][T14401]  __do_fast_syscall_32+0x96/0xf0
[  790.471583][T14401]  do_fast_syscall_32+0x34/0x70
[  790.476582][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.481132][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.487615][T14401] 
[  790.489954][T14401] Uninit was stored to memory at:
[  790.495157][T14401]  sctp_datamsg_from_user+0x4ed/0x22b0
[  790.500681][T14401]  sctp_sendmsg_to_asoc+0x1366/0x1f90
[  790.506215][T14401]  sctp_sendmsg+0x3eaa/0x5460
[  790.510943][T14401]  inet_sendmsg+0x15b/0x1d0
[  790.515635][T14401]  ____sys_sendmsg+0xe11/0x12c0
[  790.520539][T14401]  __sys_sendmsg+0x704/0x840
[  790.525279][T14401]  __ia32_compat_sys_sendmsg+0xed/0x130
[  790.530961][T14401]  __do_fast_syscall_32+0x96/0xf0
[  790.536141][T14401]  do_fast_syscall_32+0x34/0x70
[  790.541051][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.545699][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  790.552174][T14401] 
[  790.554508][T14401] Uninit was created at:
[  790.558880][T14401]  kmem_cache_alloc_trace+0xaca/0x1140
[  790.564499][T14401]  sctp_datamsg_from_user+0xf1/0x22b0
[  790.569933][T14401]  sctp_sendmsg_to_asoc+0x1366/0x1f90
[  790.575478][T14401]  sctp_sendmsg+0x3eaa/0x5460
[  790.580207][T14401]  inet_sendmsg+0x15b/0x1d0
[  790.584849][T14401]  ____sys_sendmsg+0xe11/0x12c0
[  790.589844][T14401]  __sys_sendmsg+0x704/0x840
[  790.594581][T14401]  __ia32_compat_sys_sendmsg+0xed/0x130
[  790.600173][T14401]  __do_fast_syscall_32+0x96/0xf0
[  790.605343][T14401]  do_fast_syscall_32+0x34/0x70
[  790.610247][T14401]  do_SYSENTER_32+0x1b/0x20
[  790.614893][T14401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
17:55:59 executing program 0:
symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')

17:55:59 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  790.898137][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  790.916820][   T24] audit: type=1326 audit(1640541359.860:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14407 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6eba549 code=0x0
17:56:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="95431c6d7849cca0b53072718f6594e564fbfdf59a18925d3fba68e41909fb3f9a0332e2aabcca8f6cf7bb6743e1e448ffa3a656924187a90101", 0x3a}, {&(0x7f0000000280)="df13523a7de67a3098c9d28b331674b563ac8c7413d2b03d070d9632270b59f370a5ac9c0af3f120b121c8fca1188da4ae7950c72599c25dd8a14189f88760b335c9fb3da84d3d820338a2e3b37203925a77636d036e34a129970ac5997bac4d74107df070804c0a42de7b3a2cd4247f9705ba07824d8c205560e1f96b76c66a25f7dcc2cddf9aadf59a8ea3615a0207ed02c4ba175ce87afd4ff0bc8e1ba17d6f35ef7a210242d03f36d00c4f2395b5a7679778edb2e30b72f073b678e4cfd6d0727e9cc5273b505eb8b9f9f01064de82e89fbf7619e25db5aae89dc9782e8ccc619428ca3c5e222af5e4193350feb48a9bb0c2583efc281d67108d8812667f945f6a8a4556bf008340cedc4a8ef3a4106c82aa88886884ceedf02a819e991623560b426a2dd48e13cedd33c2c11a72ed9d4b78035b09df1f08833c98374dd5a9e5da94cea6228e20da5f850c9025804ea1300bf37a5d71a617e82d3719167916084b9d7f3314a3cf0059553673dbe58925df2ac374a9265dc6dc51b42b82a2f2fb203e9dc27db0bfb9c41059e2fac83f155774725d712ed70a9d79ec28ad28e81e0636d3f91487935545c371e3ba019b78c514b75a1bee774f64b61a04a8b69b95ced72790581894b1e79b5ed9e3aa3adce68e46fe425596eca172bfb33194f7c39242baba5c30c9a0533c1724fbf7d5411efa7a7ff1757f66134e735b72de88655567d02bcb444878327608531abbdc754e0faf817b0979ce17922aea8e6d8c4a02c5c7f601b1516ea2219cf22dffab09bb073f60c8ec20700e979ba7da236e2d384fabe506c5a9af747af8ff7a2ebaf2e47d3a25386416c9dc60549fbd0593a1dbaef16eaaf63a78a21b43accf7925a27d5f7030711cb1653380618f664c8b36c2ea1db4955b4825c27e6a41cf311b43c345d75f1f55520143bc98ba952f923a5200c1afdf75667aee50ebf0bb08a04b8b09a5079a3e1f9e1bde3e1e302f111968359403645dcdf28a918a3f843fbb569d5024b4b1ae7976ab5211254409a2179fb46de0ab", 0x2e7}], 0x2}, 0x0)

17:56:00 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="95431c6d7849cca0b53072718f6594e564fbfdf59a18925d3fba68e41909fb3f9a0332e2aabcca8f6cf7bb6743e1e448ffa3a656924187a90101", 0x3a}, {&(0x7f0000000280)="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", 0x31f}], 0x2}, 0x0)

17:56:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c0002800800", @ANYRES32=r1], 0x44}}, 0x0)

17:56:00 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)

17:56:00 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  791.171250][T14415] ufs: ufs was compiled with read-only support, can't be mounted as read-write
17:56:00 executing program 2:
syz_mount_image$udf(&(0x7f0000001f80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

[  791.344622][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:00 executing program 1:
setgroups(0x1, &(0x7f00000001c0)=[0x0])

17:56:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d00000000", @ANYRES32=r1], 0x44}}, 0x0)

17:56:00 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0)
ftruncate(r1, 0x40001)
sendfile(r0, r1, 0x0, 0x100000000002)

17:56:00 executing program 4:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
sendfile(r1, r1, &(0x7f0000000200), 0xaa4)

17:56:00 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  791.722405][T14427] ufs: ufs was compiled with read-only support, can't be mounted as read-write
[  791.839543][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  791.849364][T14431] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:00 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:56:00 executing program 1:
keyctl$link(0x8, 0x0, 0xfffffffffffffffe)

17:56:00 executing program 0:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x8, r1)

17:56:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d00000000", @ANYRES32=r1], 0x44}}, 0x0)

17:56:01 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  792.274302][T14441] ufs: ufs was compiled with read-only support, can't be mounted as read-write
17:56:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0xa0001000, 0x0, 0x0, 0x0, 0x0)

[  792.330772][T14443] ptrace attach of "/root/syz-executor.0 exec"[3511] was attempted by "/root/syz-executor.0 exec"[14443]
17:56:01 executing program 4:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
sendfile(r1, r1, &(0x7f0000000200), 0xaa4)

[  792.407850][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  792.417434][T14445] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:01 executing program 2:
syz_mount_image$ufs(0x0, &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:56:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000080)={0x30}, 0x30)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
pidfd_open(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4b19b, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="020000000300000004000000", 0xc, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)

17:56:01 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d00000000", @ANYRES32=r1], 0x44}}, 0x0)

17:56:01 executing program 2:
syz_mount_image$ufs(0x0, &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:56:01 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x80})

[  793.003603][T14459] loop0: detected capacity change from 0 to 600
[  793.063652][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  793.073414][T14461] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:02 executing program 4:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
sendfile(r1, r1, &(0x7f0000000200), 0xaa4)

17:56:02 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  793.233891][T14459] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:56:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d00000000000800", @ANYRES32=r1], 0x44}}, 0x0)

17:56:02 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x400)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)

17:56:02 executing program 2:
syz_mount_image$ufs(0x0, &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:56:02 executing program 1:
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)

[  793.588042][T14474] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:02 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d00000000000800", @ANYRES32=r1], 0x44}}, 0x0)

[  793.892744][   T24] audit: type=1800 audit(1640541362.830:165): pid=14478 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1219 res=0 errno=0
17:56:03 executing program 4:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x20000051)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18}, 0x18)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
sendfile(r1, r1, &(0x7f0000000200), 0xaa4)

17:56:03 executing program 1:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unlink(&(0x7f0000000080)='./file0\x00')

17:56:03 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), 0x0, 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

[  794.236411][T14484] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:03 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x400)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)

17:56:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d00000000000800", @ANYRES32=r1], 0x44}}, 0x0)

17:56:03 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

17:56:03 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), 0x0, 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

[  794.680918][   T24] audit: type=1800 audit(1640541363.620:166): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1222 res=0 errno=0
[  794.705901][T14496] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d0000000000080005", @ANYRES32=r1], 0x44}}, 0x0)

17:56:03 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x400)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)

17:56:04 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:04 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)

17:56:04 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), 0x0, 0x0, 0x0, &(0x7f0000004a40), 0x0, &(0x7f0000004ac0))

17:56:04 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

[  795.429223][T14506] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
[  795.433321][   T24] audit: type=1800 audit(1640541364.370:167): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1199 res=0 errno=0
17:56:04 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:04 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x400)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)

17:56:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d0000000000080005", @ANYRES32=r1], 0x44}}, 0x0)

17:56:04 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0))

17:56:04 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

[  796.047835][   T24] audit: type=1800 audit(1640541364.990:168): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1202 res=0 errno=0
17:56:05 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  796.141369][T14521] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

17:56:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d0000000000080005", @ANYRES32=r1], 0x44}}, 0x0)

17:56:05 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000040)={'bond_slave_1\x00', @ifru_names})

17:56:05 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0))

[  796.702802][T14531] netlink: 'syz-executor.3': attribute type 13 has an invalid length.
17:56:05 executing program 0:
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa)

17:56:05 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

17:56:05 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

17:56:06 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0))

17:56:06 executing program 0:
r0 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="900000001c001f4d154a817393278bff0a80a578020000000100740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fc621c9ce921202ab78dcaaf6c3efed495a46215be0000760700c0c80cefd285810258ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa2", 0x90, 0x0, 0x0, 0x0)

[  797.280585][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:06 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:06 executing program 4:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff)
r1 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
io_setup(0xad, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)='37', 0x2}])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x8, 0x0, 0x0, r4}])

[  797.867490][T14551] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'.
17:56:06 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, 0x0)

17:56:06 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x124, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x104, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x124}}, 0x0)

[  798.006126][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:07 executing program 0:
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000340)=@hat={'changehat ', 0x0, 0x5e, ['stFrk \x98\x8b4\xaba\x1a\xf4\x8f\xcb#\x05T\xca\x9a\xb9sfO\x18\xddC3\xf7R\xea\r\x83f\x83Q\x1b\x9a\nt\xf7\xf9\xe31\x94\xae\x8e;\xe2\xc9\xc8b\xdc\rL@\x06v\x1b\x0e-\x03\x81\x1b\xfeC\x93\xfef\x81{\xa3\xd9\xe8ttn\xed\xc6vD\xf2N\x8e\x81\xb4\xc0\r .s1\x0fl\xf9ji\x04\a!\xb1\xfa\aB\xf9k\x12\nU\x98\x17\x8dN\xf1\x95X\xda\r=\xb3&\tE\xe5\x9a2\\\xadapy\xd3\x10\x8e390\xb9@)&\x81\x83\x98M\x965`@5\xbb\x92\xd4J\x1c\xcb\xef\x13\xbc`\xd4\xf7\x01\xa2\x1d$\xb3\x82-\xf1W3\xb9\x03\x1a\x81@\xc1\xb7}\v\xa0\xc7jJ\x9d\xb3\x06f}\xf2\x84\r%:t\x81qq\xdf\xa9.\xd6s\x99^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\xd8\xf7T\rf\x05Pt\xe2e\xfev?\xa2\xa7$\xcf.\xc1(\xbe\x80/\x1c\x82\x84*\xbb\x9c\x88\xf5D\xf7\xc5\xca\xf9o\xcf\xf1\xc0\x00\xc56\xccH\xa6\x8b+H\xf9\xe2\xb3\xa9\x84\x1dA\xefK\x93\x86/\xfa\x05H\n/\xe5=\xdaN\xd4\xd7\xfb\xca_&\x1f\x8b\xc9\xa8\x9c\x04@\xb0qL\xc2\x8c\a\t\xc4\xf8*\xf4Y\xbbBa']}, 0x15e)

17:56:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:07 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:07 executing program 1:
symlink(&(0x7f0000002680)='./file0/file0\x00', 0x0)

[  798.444582][   T24] audit: type=1400 audit(1640541367.390:169): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14563 comm="syz-executor.0"
17:56:07 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, 0x0)

17:56:07 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000006f, 0x0)
lseek(r0, 0x0, 0x4)

[  798.603513][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

17:56:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:07 executing program 1:
symlink(&(0x7f0000002680)='./file0/file0\x00', 0x0)

[  798.873375][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
17:56:07 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:07 executing program 2:
syz_mount_image$ufs(&(0x7f0000004600), &(0x7f0000004640)='./file0\x00', 0x0, 0x0, &(0x7f0000004a40), 0x0, 0x0)

17:56:07 executing program 0:
syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)={[{@dmask}]})

17:56:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000003340)=ANY=[], 0x208e24b)
ftruncate(r0, 0x0)

17:56:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

[  799.303653][T14585] ntfs: (device loop0): parse_options(): Unrecognized mount option .
17:56:08 executing program 1:
symlink(&(0x7f0000002680)='./file0/file0\x00', 0x0)

17:56:08 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:08 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x1c30c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

17:56:08 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00))
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)={0x6, 0xfb, 0x15, 0x0, 0x0, "b145e3180bb48426b58ee26ae60018d4"}, 0x15, 0x0)

17:56:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:08 executing program 1:
symlink(&(0x7f0000002680)='./file0/file0\x00', 0x0)

[  799.927391][T14600] loop2: detected capacity change from 0 to 512
17:56:09 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:09 executing program 1:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x2010, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@mode={'mode', 0x3d, 0x6}}, {}, {@mode={'mode', 0x3d, 0xef}}, {@mode={'mode', 0x3d, 0x3f8}}, {}, {@mode={'mode', 0x3d, 0xff}}], [{@uid_gt}, {@euid_lt}]})
r1 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7f, 0x81, 0x0, 0x24, 0x0, 0x0, 0x407a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2c0000000000000}, 0x0, 0x0, 0x7, 0x8, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xf, r0, 0x2)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
getpid()
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)

[  800.141054][T14600] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:56:09 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0), 0x2808003, 0x0)

17:56:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:09 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000240)=@framed={{}, [@map_idx_val, @kfunc]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x8520, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:56:09 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x2, 0x0)

17:56:09 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  800.762606][T14621] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
17:56:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:10 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000003280)={&(0x7f00000007c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000003240)=[@rights={{0x6c, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

17:56:10 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d383951de1fb367, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="158eb2d9a3080bf87e0054", 0xb}], 0x1}, 0x0)
socketpair(0x1, 0x80001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x5d, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xba4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3bc}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

17:56:10 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:10 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005f00)}, 0x0)
sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

17:56:10 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:56:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:10 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001e40)=""/193, 0xc1}], 0x1}, 0x10040)

17:56:10 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:10 executing program 2:
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0xa, 0x6, 0x0, &(0x7f0000001b80))

17:56:10 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2, 0x44}, 0xbad3, &(0x7f0000000340), 0x2b, &(0x7f0000000180), 0x7}, 0x0)

17:56:10 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d383951de1fb367, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='memory.events\x00'}, 0x30)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="158eb2d9a3080bf87e0054", 0xb}], 0x1}, 0x0)
socketpair(0x1, 0x80001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x5d, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xba4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3bc}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)

17:56:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:11 executing program 0:
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x800, 0x2, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48)

[  802.295316][T14654] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:11 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x40505330, &(0x7f00000000c0)={0x1c00000})

17:56:11 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:11 executing program 1:
socket(0x2b, 0x1, 0x8)

17:56:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x2c}}, 0x0)

17:56:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1})

17:56:11 executing program 4:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000001080)=""/58, 0x3a)

[  802.944778][T14671] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"})

17:56:12 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10)
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c)

17:56:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1})

[  803.445234][T14686] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:12 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1}, 0x0)

17:56:12 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:12 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0))

17:56:12 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x80045301, &(0x7f00000000c0))

[  803.940645][T14699] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000001340)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f9cd214d2212c0f3", "87e05c10e7432077f86483e81fe47604", "5a1994a8", '\x00\x00h\x00'}, 0x28)

17:56:13 executing program 1:
syz_io_uring_setup(0x4763, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224fffffa0074980904e4ff11070103000905010200ffe0000009058202a6"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

17:56:13 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:13 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0x5452, &(0x7f00000000c0)={0x1c00000})

17:56:13 executing program 4:
pipe2$9p(0x0, 0x44000)

[  804.776629][T14710] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:13 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000000c0)={{}, 'port1\x00'})

17:56:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:13 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0)
read$proc_mixer(r0, &(0x7f0000000140)=""/247, 0xf7)

17:56:14 executing program 4:
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
semctl$GETPID(0x0, 0x0, 0xb, 0x0)

[  805.112455][ T9781] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  805.338540][T14728] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  805.362320][ T9781] usb 2-1: Using ep0 maxpacket: 8
17:56:14 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0x80, 0x1, 'client0\x00', 0x0, "7892364cbde44a43", "f09b61d5dc102d5864c5950100a5f8909efa0000004ad9bb1f00"})

[  805.493553][ T9781] usb 2-1: config index 0 descriptor too short (expected 65316, got 36)
[  805.502266][ T9781] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32
[  805.511280][ T9781] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255
[  805.520892][ T9781] usb 2-1: config 250 has no interface number 0
[  805.527369][ T9781] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
17:56:14 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)

[  805.541343][ T9781] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  805.552836][ T9781] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166
[  805.563531][ T9781] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  805.577443][ T9781] usb 2-1: config 250 interface 228 has no altsetting 0
17:56:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:14 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a00001b, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x2000000}])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

[  805.892059][T14736] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  805.973156][ T9781] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  805.982476][ T9781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  805.990621][ T9781] usb 2-1: SerialNumber: syz
[  806.103201][T14712] raw-gadget gadget: fail, usb_ep_enable returned -22
[  806.110445][T14712] raw-gadget gadget: fail, usb_ep_enable returned -22
[  806.165970][ T9781] hub 2-1:250.228: bad descriptor, ignoring hub
[  806.172517][ T9781] hub: probe of 2-1:250.228 failed with error -5
[  806.414486][ T9781] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  806.733648][ T3560] usb 2-1: USB disconnect, device number 12
[  806.754032][ T3560] usblp0: removed
[  807.098230][ T3560] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  807.348429][ T3560] usb 2-1: Using ep0 maxpacket: 8
[  807.473222][ T3560] usb 2-1: config index 0 descriptor too short (expected 65316, got 36)
[  807.484724][ T3560] usb 2-1: config 250 has too many interfaces: 255, using maximum allowed: 32
[  807.494877][ T3560] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 255
[  807.504370][ T3560] usb 2-1: config 250 has no interface number 0
[  807.510863][ T3560] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  807.522758][ T3560] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  807.533460][ T3560] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 166
[  807.544143][ T3560] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  807.557945][ T3560] usb 2-1: config 250 interface 228 has no altsetting 0
[  807.662658][ T3560] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  807.671979][ T3560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  807.680152][ T3560] usb 2-1: SerialNumber: syz
[  807.753454][T14712] raw-gadget gadget: fail, usb_ep_enable returned -22
[  807.760684][T14712] raw-gadget gadget: fail, usb_ep_enable returned -22
[  807.994683][ T3560] usb 2-1: can't set config #250, error -71
17:56:16 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000000c0)={'wlan1\x00'})

17:56:16 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:16 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]})

17:56:16 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000a80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"a71c320c53aa7219833d7b0ffd0d82e3"}}}}, 0x90)

17:56:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:16 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a00001b, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x2000000}])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

[  808.098735][ T3560] usb 2-1: USB disconnect, device number 13
[  808.175061][T14744] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:17 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x8080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

17:56:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x80)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="f658040011c1f5a4d51adf12a8060000003b62c9f5a8f71b460000000000007c", 0x20)
sendmmsg$alg(r1, &(0x7f00000064c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="00323437b75a451add34652fc4198e700250fbca5660dc2cb42411156c35a202d34baf10b668d6f26c57dc53b705a82dbba1a871f242c27885d77eb37bdf9ca06e7fbd893db336334ee820de4d1b04", 0x4f}, {&(0x7f00000001c0)="bd17", 0x2}], 0x2}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/114, 0x60}, {&(0x7f0000000180)=""/63, 0x3f}], 0x2}, 0x0)
sendmsg$alg(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000900)="38478786889365b61af60481768d8fa35204c4fc7b2946ca227e5fca4a6dd0a0", 0x20}], 0x1}, 0x0)

17:56:17 executing program 1:
request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0)

[  809.046465][T14761] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:18 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
fsync(r0)

17:56:18 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:18 executing program 1:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001340)="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", 0xd02}], 0x1}}], 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000)

17:56:18 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a00001b, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x2000000}])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

17:56:18 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

[  810.006522][T14774] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:19 executing program 2:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffd)

17:56:19 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:19 executing program 0:
r0 = open(&(0x7f0000000300)='./file1\x00', 0x1733c2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010044)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001800))
getsockname$packet(r0, 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001a80)={@local, @empty}, 0x0)

17:56:19 executing program 2:
add_key$keyring(&(0x7f0000000600), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000500)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)

[  810.794268][T14791] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:19 executing program 1:
r0 = open(&(0x7f0000000300)='./file1\x00', 0x1733c2, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010044)

17:56:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="9a140000000000001c0012800b0001006d616373656300000c00028008000d000000000008000500", @ANYRES32=r1], 0x44}}, 0x0)

17:56:20 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:20 executing program 2:
r0 = open(&(0x7f0000000300)='./file1\x00', 0x1733c2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010044)

17:56:20 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000040)=""/137, 0x89)

[  811.570888][T14800] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
17:56:20 executing program 4:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a00001b, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x2000000}])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

17:56:20 executing program 0:
r0 = open(&(0x7f0000000300)='./file1\x00', 0x1733c2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010044)
bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a80)={@local, @empty}, &(0x7f0000001ac0)=0xc)

17:56:20 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, 0x0, 0x5c)

17:56:21 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xcf}, 0x9c)

17:56:21 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b)
preadv(r0, &(0x7f0000019b80)=[{&(0x7f00000004c0)=""/252, 0xfc}], 0x1, 0x0, 0x0)
preadv(r0, &(0x7f0000019c40)=[{&(0x7f0000019dc0)=""/212, 0xd4}], 0x1, 0x0, 0x0)

17:56:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0])
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc1f)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f00000002c0)='./file1\x00')
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x1c7002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

17:56:21 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x9}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0)

17:56:21 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000700))

17:56:21 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, 0x0, 0x5c)

17:56:21 executing program 2:
unshare(0x8000400)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

[  813.118906][T14824] loop4: detected capacity change from 0 to 264192
[  813.154098][T14823] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
17:56:22 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0)

[  813.376811][   T24] audit: type=1800 audit(1640541382.320:170): pid=14827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1198 res=0 errno=0
[  813.385077][T14817] ISOFS: Unable to identify CD-ROM format.
17:56:22 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b)
ioctl$FS_IOC_FSSETXATTR(r0, 0x660c, 0x0)

17:56:22 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, 0x0, 0x5c)

17:56:23 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0)

17:56:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0])
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc1f)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f00000002c0)='./file1\x00')
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x1c7002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

17:56:23 executing program 2:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0])
syz_io_uring_submit(0x0, 0x0, 0x0, 0xc1f)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x2c)
close(0xffffffffffffffff)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f00000002c0)='./file1\x00')
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r1, 0x800)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x1c7002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8400fffffffa)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

17:56:23 executing program 1:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

17:56:23 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x5c)

[  814.810236][T14844] loop4: detected capacity change from 0 to 264192
[  814.868169][T14845] loop2: detected capacity change from 0 to 264192
17:56:23 executing program 3:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000080)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000340)=ANY=[])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

[  815.004877][   T24] audit: type=1800 audit(1640541383.950:171): pid=14847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1223 res=0 errno=0
[  815.188297][   T24] audit: type=1800 audit(1640541384.080:172): pid=14848 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1228 res=0 errno=0
17:56:24 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x40000000)

17:56:24 executing program 1:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003540)={0x0, &(0x7f00000000c0)={0x18, 0x0, 0xffe0000000000000}, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x7fff}}, 0x0, 0x0, &(0x7f0000002d40)={0x78, 0xffffffffffffffda, 0x0, {0x0, 0x7, 0x0, {0x0, 0x8, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x83, 0x1, 0xa000, 0x80}}}, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="341557f2e1ea0e6888cf1af69230896cf2e301e234bfb4018000006a31dd210118e50000c0bb0000"], 0x0, &(0x7f0000003440)={0xa0, 0x0, 0xffffffffffffffff, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x47d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0x4}}}}, 0x0})
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

17:56:24 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x5c)

17:56:24 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0)

[  815.798311][T14853] loop3: detected capacity change from 0 to 512
17:56:24 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x5, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)

[  816.028791][T14853] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:56:25 executing program 1:
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb)

17:56:25 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x5c)

17:56:25 executing program 3:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000080)="ed41000000ed0000d0f4655fd1f4655fd1f4651f000100000000040002fdac2e177d", 0x22, 0x1600}], 0x0, &(0x7f0000000340)=ANY=[])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0xffffffff00000000)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
futimesat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x2710}})

17:56:25 executing program 2:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0)

17:56:25 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000008c0)=ANY=[@ANYBLOB="f9"], 0x4)

17:56:25 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x22c800, 0x4)

17:56:25 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@xdp, {0x0}, 0x0}, 0xa0)

[  816.925827][T14876] loop3: detected capacity change from 0 to 512
17:56:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)

17:56:26 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40), 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

[  817.155135][T14876] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:56:26 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))

17:56:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc)

[  817.612657][T14886] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma?
17:56:26 executing program 0:
symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00')
syz_mount_image$nfs(&(0x7f0000003e40), &(0x7f0000003e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f40))

17:56:26 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

17:56:26 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40), 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:26 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x40101286, 0x0)

17:56:27 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x17, 0x0, 0x0)

17:56:27 executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x0, 0x3f}}, 0x26)

17:56:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)

17:56:27 executing program 1:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x38}, 0x38}}, 0x0)

17:56:27 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40), 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c)

17:56:27 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000005c0)={'ip6_vti0\x00', 0x0})

17:56:27 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

17:56:28 executing program 3:
socketpair(0x17, 0x0, 0x0, &(0x7f0000000000))

17:56:28 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x141002)
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="99", 0x1}], 0x1, 0x0, 0x0)

[  819.143476][T14914] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  819.155138][T14914] bridge0: port 3(team0) entered blocking state
[  819.161739][T14914] bridge0: port 3(team0) entered disabled state
[  819.172281][T14914] device team0 entered promiscuous mode
[  819.177935][T14914] device team_slave_0 entered promiscuous mode
[  819.184889][T14914] device team_slave_1 entered promiscuous mode
[  819.193295][T14914] bridge0: port 3(team0) entered blocking state
[  819.199898][T14914] bridge0: port 3(team0) entered forwarding state
17:56:28 executing program 4:
syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]})

17:56:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, 0x0}, 0x5c)

17:56:28 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{}]})

17:56:28 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x244}, 0x48)

17:56:28 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

[  819.843014][T14924] nfs: Unknown parameter 'defcontext'
17:56:28 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x0, 0x0, 0xbf22}, 0x48)

17:56:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, 0x0}, 0x5c)

17:56:29 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
splice(r0, 0x0, r1, 0x0, 0x10004, 0x0)

17:56:29 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080), 0x20)

17:56:29 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:56:29 executing program 0:
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000003740)=[{&(0x7f00000003c0)='j', 0x1, 0x100000000}, {&(0x7f0000000400)='S', 0x1, 0x7ff}, {&(0x7f0000000540)="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", 0x3cc, 0xbc35}], 0x0, 0x0)

17:56:29 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
accept4(r0, 0x0, 0x0, 0x0)

17:56:29 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, 0x0}, 0x5c)

17:56:29 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000280)="48d34ea22937f8c6072e00d8ddec1f683a7d48715c4640ae022e2605f0497cfbeb2f7e3a272e67e4b7dacef010eaf14f8e906ee83990a95203f790663aa336a5d2307ca3e56b673bd4b80c017678e43551ba9af9f71a8bc89442b302a8b8cb7a6c3528c9400d88adef6d", 0x6a}, {&(0x7f0000000600)="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", 0x543}], 0x2}, 0x0)

[  820.877151][T14941] loop0: detected capacity change from 0 to 188
17:56:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x81000, &(0x7f0000000340))

17:56:30 executing program 0:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1000000, 0x4)

17:56:30 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)}, 0x5c)

17:56:30 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_opts(r0, 0x10d, 0x4, 0x0, 0x0)

17:56:30 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x141002)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127f, 0x0)

[  821.892317][T14956] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  822.178945][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
17:56:32 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401870cc, 0x0)

17:56:32 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x8002)

17:56:32 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0)
fdatasync(r0)

17:56:32 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)}, 0x5c)

17:56:32 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x85, 0x0, 0x0)

17:56:32 executing program 2:
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1)

17:56:32 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000100)=0x90)

17:56:32 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
sendmsg$rds(r0, &(0x7f0000003e00)={&(0x7f00000025c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003c00)=[@rdma_dest={0x18}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000003a00)=[{&(0x7f0000003880)=""/106, 0x6a}], 0x1}}], 0x60}, 0x0)

17:56:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000000900030073797a310000000014000000020a090000000000000000000200000614000000110001"], 0x94}}, 0x0)

17:56:32 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

17:56:32 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)}, 0x5c)

17:56:32 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x18, 0x0, 0x0)

17:56:33 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x1261, 0x0)

17:56:33 executing program 2:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

17:56:33 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

17:56:33 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x912)
shutdown(r0, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x40440c0, 0x0, 0x0)

17:56:33 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{0x0}], 0x1}, 0x5c)

17:56:33 executing program 4:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x742, 0x4)

17:56:33 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x29, 0x0, 0x7c4)

17:56:33 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="c68d82888905"}, 0x10)

17:56:33 executing program 3:
socketpair(0x25, 0x0, 0x0, &(0x7f0000000040))

17:56:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x0)

17:56:33 executing program 4:
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)

17:56:33 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{0x0}], 0x1}, 0x5c)

[  825.145805][T15000] device batadv_slave_1 entered promiscuous mode
[  825.160576][T14999] device batadv_slave_1 left promiscuous mode
17:56:34 executing program 3:
r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='%{}^\'\x00')

17:56:34 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x7c4)

17:56:34 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

17:56:34 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xc, &(0x7f0000000140), 0x20)

17:56:34 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x4, 0x0, 0x0)

17:56:34 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{0x0}], 0x1}, 0x5c)

17:56:34 executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
sendmsg$rds(r0, &(0x7f0000003e00)={&(0x7f00000025c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0)

17:56:34 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x10)

17:56:34 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x29, 0x7, 0x0, 0x0)

17:56:34 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_WIE_ON(r0, 0x700f)

17:56:34 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x9, 0x8001, 0x0, 0x0, 0xffffffffffffffff})

17:56:35 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)}], 0x1}, 0x5c)

[  826.049476][T15022] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma?
17:56:35 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8004, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)

17:56:35 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={'\x00', 0x0, 0xfffff188, 0x5})

17:56:35 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x141002)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1277, 0x20000000)

17:56:35 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0)

17:56:35 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000008c0)={@null, 0x0, 'gretap0\x00'})

17:56:35 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)}], 0x1}, 0x5c)

17:56:35 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0)

17:56:35 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000001100), &(0x7f0000002100)=""/4096}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r0, 0x0, &(0x7f0000000000)=""/72}, 0x20)

17:56:35 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x145000)
readv(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000000)=""/39, 0x27}, {0x0}], 0x3)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000013c0)='/dev/ptmx\x00', &(0x7f0000001400)='./file0\x00', r3)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x4, 0x21, 0x0, @scatter={0x4, 0x0, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000001300)=""/19, 0x13}, {&(0x7f0000001d80)=""/234, 0xea}, {&(0x7f0000001e80)=""/128, 0x80}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1)

17:56:35 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x1279, 0x0)

17:56:35 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000140))

17:56:35 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)}], 0x1}, 0x5c)

17:56:36 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401870c8, 0x0)

17:56:36 executing program 3:
pipe(&(0x7f0000000340))
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_audit(0x10, 0x3, 0x9)
io_uring_setup(0xa06, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x337, 0x0, r0})

17:56:36 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt(r0, 0x0, 0x0, 0x0, 0x0)

17:56:36 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff})

17:56:36 executing program 4:
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

17:56:36 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x0)

17:56:36 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f0000000140), 0x20)

17:56:36 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:36 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080), 0x8)

17:56:36 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:56:36 executing program 4:
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:56:37 executing program 1:
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4)
socketpair(0x9, 0x0, 0x0, &(0x7f0000000040))

17:56:37 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:37 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x10, 0x0, 0x7c4)

17:56:37 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x3edb, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0)
io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000)

17:56:37 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x178)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)

17:56:37 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x1e, &(0x7f0000000140), 0x20)

17:56:37 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x0)

17:56:37 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:37 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8)

17:56:37 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x8)

17:56:37 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x80081280, 0x0)

17:56:37 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$nfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)={[], [{@fowner_lt}, {@fowner_lt={'fowner<', 0xee01}}, {@fowner_lt}, {@fowner_gt={'fowner>', 0xee00}}, {@fowner_lt={'fowner<', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_gt={'uid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]})

17:56:38 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:38 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125e, 0x20000000)

17:56:38 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)

[  829.220889][T15103] nfs: Unknown parameter 'fowner<00000000000000000000'
17:56:38 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140), &(0x7f0000000180)=0x8)

17:56:38 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)

17:56:38 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:38 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000400000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fib_table_lookup\x00', r0}, 0x10)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0x1}], 0x1}, 0x0)

17:56:38 executing program 0:
r0 = socket$inet(0x2, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040), 0xc)

17:56:38 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x5, 0x0, 0x0)

17:56:38 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x2, 0x3})

17:56:38 executing program 1:
socketpair(0x22, 0x0, 0x22, &(0x7f0000000000))

17:56:38 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:39 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xea)

17:56:39 executing program 0:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:56:39 executing program 3:
renameat2(0xffffffffffffffff, &(0x7f0000005000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000005040)='./file0\x00', 0x6)

17:56:39 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:39 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x200000000000022b, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra]}, 0x18)

17:56:39 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:40 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xea)

17:56:40 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0)

17:56:40 executing program 3:
rt_sigaction(0x13, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000680))

17:56:40 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x107f84fc91be3f98)

17:56:40 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000008c0)={0x0, 0x4, 0x2, 0x0, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @dev}]}, 0x28)

17:56:40 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[], [{@dont_appraise}]})

17:56:40 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:40 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x50, 0xffff, 0x0, {}, {}, @cond})

17:56:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

17:56:40 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x1000001bd)

17:56:40 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000580)=""/248, 0xf8)

[  831.996078][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
17:56:41 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x0, 0x29, &(0x7f0000000280)="00e2611f0caef762793edaa71401028836947908000000f23a00000000000000076feb3c19d16cb6a1")

17:56:41 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:41 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)

17:56:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000540), 0x2bf70)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x40c00002c)

[  832.322555][ T3567] usb 4-1: new high-speed USB device number 6 using dummy_hcd
17:56:41 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x2000, 0x10, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
syz_mount_image$jfs(0x0, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffff50, 0x1, &(0x7f0000000780)=[{&(0x7f0000000700)}], 0x1051082, &(0x7f00000007c0)=ANY=[@ANYBLOB])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

[  832.592883][ T3567] usb 4-1: Using ep0 maxpacket: 8
17:56:41 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  832.673268][T15176] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[  832.712602][ T3567] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  832.720858][ T3567] usb 4-1: config 0 has no interface number 0
[  832.727310][ T3567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  832.738433][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  832.749209][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  832.762574][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  832.773854][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.774314][ T3560] usb 2-1: new high-speed USB device number 14 using dummy_hcd
17:56:42 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)

[  833.023465][T15183] loop0: detected capacity change from 0 to 264192
[  833.162576][ T3560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.173992][ T3560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  833.190123][ T3560] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  833.199918][ T3560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:56:42 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24000844)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000140)='GPL\x00'}, 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2})

[  833.248510][ T3567] usb 4-1: config 0 descriptor??
[  833.500892][ T3560] usb 2-1: config 0 descriptor??
[  833.557855][ T3567] usb 4-1: USB disconnect, device number 6
[  833.892157][ T9781] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  833.975912][ T3560] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  834.014018][ T3560] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input13
17:56:43 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:43 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x50, 0xffff, 0x0, {}, {}, @cond})

17:56:43 executing program 4:
syz_mount_image$sysv(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)

17:56:43 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x2000, 0x10, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
syz_mount_image$jfs(0x0, &(0x7f00000006c0)='./file0\x00', 0xffffffffffffff50, 0x1, &(0x7f0000000780)=[{&(0x7f0000000700)}], 0x1051082, &(0x7f00000007c0)=ANY=[@ANYBLOB])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r1)

[  834.127482][ T3560] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  834.183576][ T9781] usb 6-1: Using ep0 maxpacket: 16
[  834.289660][T15195] 9pnet_virtio: no channels available for device syz
[  834.323901][ T9781] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  834.394164][T11053] usb 2-1: USB disconnect, device number 14
[  834.453825][T15198] loop0: detected capacity change from 0 to 264192
[  834.502713][ T9781] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40
[  834.502850][ T9781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.520129][ T9781] usb 6-1: Product: syz
[  834.524489][ T9781] usb 6-1: Manufacturer: syz
[  834.529222][ T9781] usb 6-1: SerialNumber: syz
[  834.878991][ T3567] usb 4-1: new high-speed USB device number 7 using dummy_hcd
17:56:43 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x0, 0x29, &(0x7f0000000280)="00e2611f0caef762793edaa71401028836947908000000f23a00000000000000076feb3c19d16cb6a1")

17:56:43 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{}], [{@smackfshat={'smackfshat', 0x3d, '&'}}, {@uid_gt={'uid>', 0xee00}}, {@measure}]})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)}, 0x0)

17:56:43 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:43 executing program 0:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000)

[  835.033947][ T9781] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input14
[  835.063092][ T2831] bcm5974 6-1:1.0: could not read from device
[  835.132372][ T3567] usb 4-1: Using ep0 maxpacket: 8
[  835.137925][ T2831] bcm5974 6-1:1.0: could not read from device
[  835.153543][ T9781] usb 6-1: USB disconnect, device number 10
17:56:44 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  835.272409][ T3567] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  835.280768][ T3567] usb 4-1: config 0 has no interface number 0
[  835.287322][ T3567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  835.298585][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  835.309360][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  835.322887][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  835.334243][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.411605][T15208] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[  835.579273][T15214] loop0: detected capacity change from 0 to 512
17:56:44 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xfd, 0xfd000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[  835.711606][ T3567] usb 4-1: config 0 descriptor??
[  835.864530][T15214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:56:44 executing program 0:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

[  835.982240][   T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  836.004941][T11053] usb 4-1: USB disconnect, device number 7
17:56:45 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:45 executing program 4:
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
chdir(&(0x7f0000000180)='./bus/file0\x00')
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x20000000, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000200)='./bus\x00', 0x1)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_setup(0x2, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000e2ffffff000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8)
ftruncate(0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100)
write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x1000001bd)

[  836.383046][   T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.394332][   T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  836.407499][   T19] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  836.416816][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.499681][   T19] usb 2-1: config 0 descriptor??
[  836.579740][T15226] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
17:56:45 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x50, 0xffff, 0x0, {}, {}, @cond})

17:56:45 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8)
ftruncate(r2, 0x200002)
sendfile(r0, r2, 0x0, 0x80001d00c0cc)

17:56:45 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  836.995198][   T19] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  837.057114][   T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input15
[  837.446448][   T19] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  837.654689][   T19] usb 2-1: USB disconnect, device number 15
[  837.684321][ T3567] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  838.002391][ T3567] usb 4-1: Using ep0 maxpacket: 8
[  838.283601][ T3567] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  838.291972][ T3567] usb 4-1: config 0 has no interface number 0
[  838.298284][ T3567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  838.311731][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
17:56:47 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x0, 0x29, &(0x7f0000000280)="00e2611f0caef762793edaa71401028836947908000000f23a00000000000000076feb3c19d16cb6a1")

17:56:47 executing program 0:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r1 = open$dir(&(0x7f0000002c00)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x6)
write$P9_RFLUSH(r0, &(0x7f0000000400)={0x7}, 0x7)
sendfile(r0, r1, 0x0, 0x10000)

17:56:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:47 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8)
ftruncate(r2, 0x200002)
sendfile(r0, r2, 0x0, 0x80001d00c0cc)

[  838.322951][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  838.337083][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  838.346360][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.511685][ T3567] usb 4-1: config 0 descriptor??
[  838.590596][T15247] loop0: detected capacity change from 0 to 512
17:56:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  838.798016][   T24] audit: type=1804 audit(1640541407.740:173): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir000553558/syzkaller.4o6u8V/826/file0/file0" dev="sda1" ino=1200 res=1 errno=0
[  838.963171][ T3558] usb 4-1: USB disconnect, device number 8
17:56:48 executing program 0:
r0 = socket(0x1e, 0x5, 0x0)
shutdown(r0, 0x2)

[  839.285505][ T3560] usb 2-1: new high-speed USB device number 16 using dummy_hcd
17:56:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:48 executing program 5:
r0 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@vsock}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
io_uring_enter(r0, 0x2905, 0x0, 0x0, 0x0, 0x0)

[  839.833029][ T3560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  839.844196][ T3560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  839.857346][ T3560] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  839.866649][ T3560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:56:48 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
open$dir(&(0x7f0000002c00)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x6)
write$P9_RFLUSH(r0, &(0x7f0000000400)={0x7}, 0x7)

17:56:48 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x50, 0xffff, 0x0, {}, {}, @cond})

17:56:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000400)={0x0, @l2tp={0x2, 0x0, @remote}, @phonet, @can})

17:56:48 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  840.194562][ T3560] usb 2-1: config 0 descriptor??
[  840.301087][T15267] loop4: detected capacity change from 0 to 512
[  840.473163][T15267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  840.557520][   T24] audit: type=1804 audit(1640541409.500:174): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir118986232/syzkaller.3oz6s4/764/file0/file0" dev="sda1" ino=1225 res=1 errno=0
[  840.673533][ T3567] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  840.725546][ T3560] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  840.769917][ T3560] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input16
[  840.890790][ T3560] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  840.942589][ T3567] usb 4-1: Using ep0 maxpacket: 8
[  841.063174][ T3567] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  841.073760][ T3567] usb 4-1: config 0 has no interface number 0
[  841.073876][ T3567] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  841.074014][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  841.074130][ T3567] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  841.074304][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  841.074431][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.142603][ T3567] usb 4-1: config 0 descriptor??
[  841.165839][ T3560] usb 2-1: USB disconnect, device number 16
[  841.415318][ T3558] usb 4-1: USB disconnect, device number 9
17:56:50 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x0, 0x29, &(0x7f0000000280)="00e2611f0caef762793edaa71401028836947908000000f23a00000000000000076feb3c19d16cb6a1")

17:56:50 executing program 5:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)

17:56:50 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0200001900010026bd7000ffdbdf25fe8000000000000c00000000000000bbfc0200000000000000000000000000014e2300774e2400800a"], 0x21c}}, 0x0)

17:56:50 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:50 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x0, @local}, 0x10)

[  841.811046][T15278] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'.
[  841.832230][T15279] device batadv_slave_1 entered promiscuous mode
[  841.874650][T15274] device batadv_slave_1 left promiscuous mode
17:56:50 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e00b030029000505d25a80648c63940d0424fc60100011400a2f0000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

17:56:50 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:51 executing program 0:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
open(&(0x7f0000000280)='./file0/../file0\x00', 0x10000, 0x1)
open$dir(0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@none}], [{@subj_role={'subj_role', 0x3d, '['}}, {@seclabel}, {@seclabel}, {@subj_role={'subj_role', 0x3d, ','}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}]})
r1 = perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f00000003c0)='./file0\x00', 0x6)
write$P9_RFLUSH(r0, &(0x7f0000000400)={0x7}, 0x7)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000440)={{}, 0x100, './file0/../file0\x00'})

17:56:51 executing program 4:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000040))
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8)
ftruncate(r3, 0x200002)
sendfile(r0, r3, 0x0, 0x80001d00c0cc)

17:56:51 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0)

[  842.302640][ T3567] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  842.413318][T15289] loop0: detected capacity change from 0 to 512
17:56:51 executing program 5:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {0x0, 0x0, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000)

17:56:51 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  842.618602][T15289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  842.720714][T15296] loop5: detected capacity change from 0 to 512
[  842.762645][ T3567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  842.773889][ T3567] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  842.787194][ T3567] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  842.796504][ T3567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.962244][T15241] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  843.090774][T15296] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  843.262406][ T3567] usb 2-1: config 0 descriptor??
[  843.277544][T15241] usb 4-1: Using ep0 maxpacket: 8
[  843.404956][T15241] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  843.413916][T15241] usb 4-1: config 0 has no interface number 0
[  843.420145][T15241] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  843.431370][T15241] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  843.442220][T15241] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  843.455614][T15241] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  843.464905][T15241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.483390][T15241] usb 4-1: config 0 descriptor??
[  843.745123][ T3567] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  843.767772][ T3567] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input17
[  843.770478][ T3558] usb 4-1: USB disconnect, device number 10
[  843.860906][ T3567] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  844.195081][ T3558] usb 2-1: USB disconnect, device number 17
17:56:53 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:56:53 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x115}, 0x98)

17:56:53 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="a80000008400000001000000", @ANYBLOB="9d"], 0xa8}, 0x0)

17:56:53 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:53 executing program 5:
syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @val, {@ipv6}}, 0x0)

17:56:53 executing program 3:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])

17:56:53 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:53 executing program 5:
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

17:56:54 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0)

17:56:54 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r0, 0x0)
poll(&(0x7f00000001c0)=[{}], 0x1, 0x0)

[  845.222541][T11053] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  845.315465][ T3558] usb 2-1: new high-speed USB device number 18 using dummy_hcd
17:56:54 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000280)=@in={0x10, 0x2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000002c0)="f5", 0x1}], 0x1, &(0x7f0000000640)=[@authinfo={0x10}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}], 0x2c}, 0x0)

17:56:54 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  845.463075][T11053] usb 4-1: Using ep0 maxpacket: 8
[  845.614790][T11053] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  845.623137][T11053] usb 4-1: config 0 has no interface number 0
[  845.629355][T11053] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  845.640551][T11053] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  845.651303][T11053] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  845.664706][T11053] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  845.673992][T11053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.763729][ T3558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  845.774974][ T3558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  845.791402][ T3558] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  845.801183][ T3558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.971115][ T3558] usb 2-1: config 0 descriptor??
[  845.980099][T11053] usb 4-1: config 0 descriptor??
[  846.241649][ T3567] usb 4-1: USB disconnect, device number 11
[  846.445347][ T3558] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  846.459672][ T3558] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input18
[  846.547662][ T3558] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  846.660055][ T3558] usb 2-1: USB disconnect, device number 18
17:56:56 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

17:56:56 executing program 4:
r0 = socket(0x1c, 0x10000001, 0x84)
r1 = dup2(r0, r0)
r2 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r3 = dup2(r1, r2)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x31, &(0x7f0000000040), &(0x7f0000000000)=0x8)

17:56:56 executing program 5:
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x6)

17:56:56 executing program 0:
open$dir(&(0x7f00000002c0)='./file0\x00', 0x10a10, 0x1f5)
truncate(&(0x7f0000000000)='./file0\x00', 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

17:56:56 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:56 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:56:56 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = fcntl$dupfd(r2, 0x0, r0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a)

17:56:56 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:56 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x90)

17:56:56 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0xf90, 0x0, 0x0)

[  847.694015][ T3558] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  847.822407][ T3567] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  847.972466][ T3558] usb 4-1: Using ep0 maxpacket: 8
17:56:57 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, 0x0)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  848.093026][ T3558] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  848.101282][ T3558] usb 4-1: config 0 has no interface number 0
[  848.107673][ T3558] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  848.118886][ T3558] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  848.129784][ T3558] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
17:56:57 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1, 0x7, 0x0)

[  848.146301][ T3558] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  848.156142][ T3558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.193229][ T3567] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.205277][ T3567] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  848.218474][ T3567] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  848.227875][ T3567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.326944][ T3558] usb 4-1: config 0 descriptor??
[  848.422714][ T3567] usb 2-1: config 0 descriptor??
[  848.589597][ T3558] usb 4-1: USB disconnect, device number 12
[  848.962477][ T3567] usbhid 2-1:0.0: can't add hid device: -71
[  848.968743][ T3567] usbhid: probe of 2-1:0.0 failed with error -71
[  848.980239][ T3567] usb 2-1: USB disconnect, device number 19
17:56:58 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

17:56:58 executing program 4:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2000)

17:56:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x10001, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

17:56:58 executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[])

17:56:58 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, 0x0)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:58 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905"], 0x0)

[  849.510623][T15363] loop0: detected capacity change from 0 to 512
17:56:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

17:56:58 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, 0x0)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

[  849.708735][T15363] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:56:58 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1, {0x7, 0x22}}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
chdir(&(0x7f0000004200)='./file0\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0x3)

17:56:58 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0), 0x0, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002002, 0x0)

[  849.853165][T11053] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  850.082453][ T3558] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  850.103379][T11053] usb 4-1: Using ep0 maxpacket: 8
[  850.224031][T11053] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  850.232364][T11053] usb 4-1: config 0 has no interface number 0
[  850.238770][T11053] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  850.250085][T11053] usb 4-1: config 0 interface 65 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  850.261108][T11053] usb 4-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  850.274438][T11053] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  850.283702][T11053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:56:59 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:56:59 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  850.473012][ T3558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  850.484194][ T3558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  850.500291][ T3558] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  850.510339][ T3558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.666553][ T3558] usb 2-1: config 0 descriptor??
[  850.681600][T11053] usb 4-1: config 0 descriptor??
[  850.946546][ T3560] usb 4-1: USB disconnect, device number 13
[  851.192372][ T3558] usbhid 2-1:0.0: can't add hid device: -71
[  851.198643][ T3558] usbhid: probe of 2-1:0.0 failed with error -71
[  851.241060][ T3558] usb 2-1: USB disconnect, device number 20
17:57:00 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

17:57:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

17:57:00 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1, {0x7, 0x22}}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
chdir(&(0x7f0000004200)='./file0\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0x3)

17:57:00 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:57:00 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:00 executing program 3:

[  851.723786][T15394] loop5: detected capacity change from 0 to 15
17:57:00 executing program 3:

[  851.899301][T15394] syz-executor.5: attempt to access beyond end of device
[  851.899301][T15394] loop5: rw=2049, want=16, limit=15
[  851.912651][T15394] Buffer I/O error on dev loop5, logical block 15, lost async page write
[  851.924918][T15394] syz-executor.5: attempt to access beyond end of device
[  851.924918][T15394] loop5: rw=2049, want=22, limit=15
17:57:00 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:00 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:57:01 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0x1, 0x12a, 0x0)

17:57:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

17:57:01 executing program 3:

[  852.312370][ T3558] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  852.673245][T15410] loop5: detected capacity change from 0 to 15
[  852.680268][ T3558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.692084][ T3558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  852.705195][ T3558] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  852.714510][ T3558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.809023][ T3558] usb 2-1: config 0 descriptor??
[  853.352239][ T3558] usbhid 2-1:0.0: can't add hid device: -71
[  853.362363][ T3558] usbhid: probe of 2-1:0.0 failed with error -71
[  853.373526][ T3558] usb 2-1: USB disconnect, device number 21
17:57:02 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:02 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:57:02 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:02 executing program 3:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

17:57:02 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0x1, 0x12a, 0x0)

17:57:02 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x0)

17:57:03 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:57:03 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0x1, 0x12a, 0x0)

17:57:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @dev}, {}, 0x0, {0x2, 0x0, @empty}, 'ip6_vti0\x00'})

17:57:03 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
epoll_wait(0xffffffffffffffff, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:03 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0x1, 0x12a, 0x0)

[  854.382411][ T3558] usb 2-1: new high-speed USB device number 22 using dummy_hcd
17:57:03 executing program 3:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

[  854.743251][ T3558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.754684][ T3558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  854.767911][ T3558] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  854.777217][ T3558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.900092][ T3558] usb 2-1: config 0 descriptor??
[  855.442602][ T3558] usbhid 2-1:0.0: can't add hid device: -71
[  855.448856][ T3558] usbhid: probe of 2-1:0.0 failed with error -71
[  855.461288][ T3558] usb 2-1: USB disconnect, device number 22
17:57:04 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:04 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

17:57:04 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20010c0, 0x0)
mount$bpf(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0xc50c4, 0x0)
mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0)

17:57:04 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
epoll_wait(0xffffffffffffffff, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:04 executing program 0:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1, {0x7, 0x22}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x183}}}, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x3)
ioctl$NS_GET_OWNER_UID(r2, 0x401070cd, 0x0)

17:57:04 executing program 3:
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

17:57:05 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

17:57:05 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
epoll_wait(0xffffffffffffffff, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006)
write$P9_RREADLINK(r0, &(0x7f0000000380)=ANY=[], 0x44)

17:57:05 executing program 5:
syz_emit_ethernet(0x38, &(0x7f0000000540)={@empty, @dev, @val={@void}, {@generic={0x8906, "a0bc9f0b47d7c7ab48d77d9292be4d1555cc41c42bd476affc3287bcc0b6731ca49bda72fdae"}}}, 0x0)

17:57:05 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0)

17:57:05 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

[  856.602581][ T3560] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  856.647358][T15457] loop0: detected capacity change from 0 to 15
[  856.993521][ T3560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.004835][ T3560] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  857.018048][ T3560] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  857.027445][ T3560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.129484][ T3560] usb 2-1: config 0 descriptor??
[  857.295279][ T3567] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  857.492134][ T3567] usb 4-1: device descriptor read/64, error 18
[  857.682351][ T3560] usbhid 2-1:0.0: can't add hid device: -71
[  857.688704][ T3560] usbhid: probe of 2-1:0.0 failed with error -71
[  857.708788][ T3560] usb 2-1: USB disconnect, device number 23
[  857.763399][ T3567] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  857.952091][ T3567] usb 4-1: device descriptor read/64, error 18
[  858.072539][ T3567] usb usb4-port1: attempt power cycle
17:57:07 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32=r0], 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:07 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:07 executing program 5:
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@local]})

17:57:07 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)

17:57:07 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

17:57:07 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x3, 0x88)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040), 0x8)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

17:57:07 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080), 0x4)

17:57:07 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:07 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x5)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e)

[  858.492959][ T3567] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  858.663492][ T3567] usb 4-1: device descriptor read/8, error -61
[  858.682672][ T3558] usb 2-1: new high-speed USB device number 24 using dummy_hcd
17:57:07 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @empty}})

[  858.932252][ T3567] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  859.073513][ T3558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.085003][ T3558] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  859.098237][ T3558] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  859.103574][ T3567] usb 4-1: device descriptor read/8, error -61
[  859.107598][ T3558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.170852][ T3558] usb 2-1: config 0 descriptor??
[  859.232876][ T3567] usb usb4-port1: unable to enumerate USB device
[  859.705317][ T3558] usbhid 2-1:0.0: can't add hid device: -71
[  859.711589][ T3558] usbhid: probe of 2-1:0.0 failed with error -71
[  859.741394][ T3558] usb 2-1: USB disconnect, device number 24
17:57:08 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0)

17:57:08 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080), 0x4)

17:57:09 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:09 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="fbf1bc5a", 0x4)

17:57:09 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002880)="8b", 0x1}], 0x1}}], 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:09 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000100000018210000", @ANYRES32, @ANYBLOB="000000ed00040000c9ffffff1810000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000d5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:57:09 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080), 0x4)

17:57:09 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030060bb0206000000000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

17:57:09 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x548)
perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0x1200, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a8", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030060bb0206000000000000", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x16, 0x8, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ldst={0x0, 0x2, 0x0, 0x6, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffb}, @ldst={0x1, 0x2, 0x6, 0xb, 0x8, 0x0, 0x10}, @map_val={0x18, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x101, 0xa8, &(0x7f0000000640)=""/168, 0x40f00, 0x1d, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0x7, 0xee7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000980)}, 0x80)

17:57:09 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  860.392226][ T3560] usb 4-1: new high-speed USB device number 18 using dummy_hcd
17:57:09 executing program 2:
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x414000000000000, &(0x7f0000000000)=@base={0x5, 0x47f, 0x4803, 0x65, 0x0, 0x1, 0x84020000}, 0x48)

[  860.602420][ T3560] usb 4-1: device descriptor read/64, error 18
17:57:09 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0xd2a, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000ac0), 0x0}, 0x20)

[  860.873619][ T3560] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  861.062833][ T3560] usb 4-1: device descriptor read/64, error 18
[  861.182934][ T3560] usb usb4-port1: attempt power cycle
[  861.592480][ T3560] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  861.812394][ T3560] usb 4-1: device descriptor read/8, error -61
[  862.082287][ T3560] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  862.256577][ T3560] usb 4-1: device descriptor read/8, error -61
[  862.382662][ T3560] usb usb4-port1: unable to enumerate USB device
17:57:11 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0)

17:57:11 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00')
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00')

17:57:11 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:11 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e002403240248ff056c05001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9478da2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a4807000d00000009100e00390340d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x80)

17:57:11 executing program 2:
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x414000000000000, &(0x7f0000000000)=@base={0x5, 0x47f, 0x4803, 0x65, 0x0, 0x1, 0x84020000}, 0x48)

[  863.215590][T15521] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.223672][T15521] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.231669][T15521] device bridge0 entered promiscuous mode
17:57:12 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:12 executing program 2:
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x414000000000000, &(0x7f0000000000)=@base={0x5, 0x47f, 0x4803, 0x65, 0x0, 0x1, 0x84020000}, 0x48)

[  863.707533][T15524] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'.
[  863.718308][T15524] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.725914][T15524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  863.734089][T15524] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.741508][T15524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  863.750078][T15524] device bridge0 left promiscuous mode
17:57:12 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:12 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  863.752156][ T3567] usb 4-1: new high-speed USB device number 22 using dummy_hcd
17:57:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00')
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00')

[  863.962566][ T3567] usb 4-1: device descriptor read/64, error 18
17:57:12 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e002403240248ff056c05001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9478da2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a4807000d00000009100e00390340d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x80)

[  864.252196][ T3567] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  864.443557][ T3567] usb 4-1: device descriptor read/64, error 18
[  864.535251][T15538] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.543089][T15538] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.550853][T15538] device bridge0 entered promiscuous mode
[  864.566001][ T3567] usb usb4-port1: attempt power cycle
[  864.799811][T15538] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'.
[  864.810131][T15538] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.817728][T15538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.825911][T15538] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.833584][T15538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.848204][T15538] device bridge0 left promiscuous mode
[  865.031574][ T3567] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  865.234585][ T3567] usb 4-1: device descriptor read/8, error -61
[  865.502369][ T3567] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  865.672772][ T3567] usb 4-1: device descriptor read/8, error -61
[  865.792680][ T3567] usb usb4-port1: unable to enumerate USB device
[  865.852176][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
17:57:15 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)

17:57:15 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
epoll_wait(r1, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:15 executing program 2:
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x414000000000000, &(0x7f0000000000)=@base={0x5, 0x47f, 0x4803, 0x65, 0x0, 0x1, 0x84020000}, 0x48)

17:57:15 executing program 1:
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:15 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e002403240248ff056c05001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9478da2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a4807000d00000009100e00390340d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x80)

17:57:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00')
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}, 0x0)
gettid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00')

[  866.468785][T15545] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.476626][T15545] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.484427][T15545] device bridge0 entered promiscuous mode
17:57:15 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
epoll_wait(r1, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  866.752820][T15241] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  866.803905][T15545] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'.
[  866.814041][T15545] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.821556][T15545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  866.829764][T15545] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.837318][T15545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  866.846492][T15545] device bridge0 left promiscuous mode
17:57:16 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e002403240248ff056c05001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9478da2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a4807000d00000009100e00390340d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x7000000}, 0x80)

17:57:16 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000280)="85", 0x1, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10)

[  867.138075][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  867.149919][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  867.161407][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  867.174602][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  867.182891][T11053] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  867.186148][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.220705][T15241] usb 2-1: config 0 descriptor??
[  867.243222][T15547] raw-gadget gadget: fail, usb_ep_enable returned -22
17:57:16 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r0, 0xffff, 0x8000, &(0x7f0000000040), 0x4)

[  867.372182][T11053] usb 4-1: device descriptor read/64, error 18
17:57:16 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140), 0x98)

17:57:16 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
epoll_wait(r1, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  867.563178][T15559] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.570894][T15559] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.579214][T15559] device bridge0 entered promiscuous mode
[  867.682185][T11053] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  867.705975][T15241] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  867.745086][T15241] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input19
[  867.836859][T15561] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'.
[  867.846987][T15561] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.854560][T15561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.862740][T15561] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.870198][T15561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.878967][T15561] device bridge0 left promiscuous mode
[  867.882687][T15241] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  867.902477][T11053] usb 4-1: device descriptor read/64, error 18
[  867.982155][T15241] usb 2-1: USB disconnect, device number 25
[  868.023158][T11053] usb usb4-port1: attempt power cycle
[  868.452144][T11053] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  868.642415][T11053] usb 4-1: device descriptor read/8, error -61
[  868.922142][T11053] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  869.102478][T11053] usb 4-1: device descriptor read/8, error -61
[  869.222437][T11053] usb usb4-port1: unable to enumerate USB device
17:57:18 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)

17:57:18 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r0, &(0x7f0000000140)=@un=@file={0xa}, 0xa)

17:57:18 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000080), &(0x7f0000000140)=0x98)

17:57:18 executing program 4:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000011})
r1 = fcntl$dupfd(r0, 0x0, r0)
epoll_wait(r1, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:18 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000040)="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", 0xffb}, {&(0x7f0000001040)="4333ba9c3213bceb097625c486a2d54889a9b97cf814330571fb11159fd1210357c44a70bbb0294130541c4c02b9cbfdb16575c8117189815e2a84a31d574babec26df0e06796b453acdb1bc1aef", 0x4e}, {&(0x7f0000002fc0)="3dad60134676c47ab47a8f776134dffadffc9ef80ee189c61b89b25b1c3ad57059a0306bb3726e9f358fc4020304de6d14bb00fc0122320bf88772f968165227e724a9182a6d8c8b65bac98c6dda45a38321fb6a623a1676d01a172d4fb3aa71b85eb0c95239ab730ebcffdc280cc30eaef7f1ff5e90ba3d6d4ce03d7c700ec6077d6ef5c164f48b89947b06019933fb3351f1c0c8c8183ef0a2d8274dfc23c96831f80246e8d7a89b5e0050718a96f87951c3ac64c3f8bf", 0xb8}], 0x3}, 0x0)

17:57:18 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:18 executing program 4:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000011})
r1 = fcntl$dupfd(r0, 0x0, r0)
epoll_wait(r1, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:18 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000240)={0x1}, 0x8)

17:57:18 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000080)=0x8)

17:57:18 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000280)=0x98)

[  870.042194][    T7] usb 2-1: new high-speed USB device number 26 using dummy_hcd
17:57:19 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c)
sendto(r0, &(0x7f0000000480)="a3", 0x1, 0x0, 0x0, 0x0)

17:57:19 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

[  870.452376][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  870.467428][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  870.479402][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  870.492589][    T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  870.501982][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.515860][T11053] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  870.539332][    T7] usb 2-1: config 0 descriptor??
[  870.563962][T15572] raw-gadget gadget: fail, usb_ep_enable returned -22
[  870.722359][T11053] usb 4-1: device descriptor read/64, error 18
[  871.022142][T11053] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  871.045438][    T7] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  871.062438][    T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input20
[  871.159699][    T7] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  871.257591][T15241] usb 2-1: USB disconnect, device number 26
[  871.259281][T11053] usb 4-1: device descriptor read/64, error 18
[  871.399795][T11053] usb usb4-port1: attempt power cycle
[  871.832256][T11053] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  872.002284][T11053] usb 4-1: device descriptor read/8, error -61
[  872.272253][T11053] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  872.442412][T11053] usb 4-1: device descriptor read/8, error -61
[  872.562716][T11053] usb usb4-port1: unable to enumerate USB device
17:57:21 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)

17:57:21 executing program 4:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000011})
r1 = fcntl$dupfd(r0, 0x0, r0)
epoll_wait(r1, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:21 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000540), &(0x7f0000000600)=0x98)

17:57:21 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={0x0, 0x8}, 0x8)

17:57:21 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x200}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x2}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20104, 0x0, 0x0)

17:57:21 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:22 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000000100), 0x10000000000001aa, 0x0, 0x0)

17:57:22 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000100), 0x8)

17:57:22 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  873.533439][ T3567] usb 4-1: new high-speed USB device number 34 using dummy_hcd
17:57:22 executing program 2:
r0 = socket(0x1c, 0x10000001, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000380), &(0x7f0000002500)=0x10)

17:57:22 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:22 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x3, 0x0, 0x1}, 0x98)

[  873.722371][ T3567] usb 4-1: device descriptor read/64, error 18
[  873.992451][ T3567] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  874.182325][ T3567] usb 4-1: device descriptor read/64, error 18
[  874.302650][ T3567] usb usb4-port1: attempt power cycle
[  874.712218][ T3567] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  874.882418][ T3567] usb 4-1: device descriptor read/8, error -61
[  875.152093][ T3567] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  875.322483][ T3567] usb 4-1: device descriptor read/8, error -61
[  875.442642][ T3567] usb usb4-port1: unable to enumerate USB device
17:57:25 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00000001090224000100"], 0x0)

17:57:25 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000000c0)={0x0, 0x47e}, 0x8)

17:57:25 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:25 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:25 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000440)={0x10, 0x2}, 0x10)

17:57:25 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000580)={0x1c, 0x1c}, 0x1c)

17:57:25 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:25 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
listen(r0, 0x3)

17:57:25 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x901, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='f'], 0x8)

17:57:25 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r1, r1)
r3 = dup2(r0, r2)
sendmsg$inet_sctp(r3, &(0x7f0000000240)={&(0x7f0000000300)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0xc)

17:57:25 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:25 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  876.897830][ T3567] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  877.162616][ T3567] usb 4-1: Using ep0 maxpacket: 8
[  877.293579][ T3567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  877.304126][ T3567] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  877.313466][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  877.325022][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.456841][ T3567] usb 4-1: config 0 descriptor??
[  877.672282][T11053] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  877.716199][ T3567] usb 4-1: USB disconnect, device number 38
[  878.036766][T11053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  878.048096][T11053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  878.058386][T11053] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  878.071457][T11053] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  878.080801][T11053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.097820][T11053] usb 2-1: config 0 descriptor??
17:57:27 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00000001090224000100"], 0x0)

17:57:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000000c0)=0x2)

17:57:27 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = fcntl$dupfd(r1, 0x0, r0)
sendmsg$inet_sctp(r2, &(0x7f0000000100)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1b, &(0x7f00000000c0)=[{&(0x7f0000000080)="f526cc4da4c4dce5e5ed513f174b14bce9c7f0f510f5e9abc98ee6fb08ed", 0x1e}, {&(0x7f0000000200)="261b7991c1feb5fe3f2f3bff8541de604dfa9190e06e4aec86045ca43b9a442c89f73c4b4fa7c3725f29371cbe1913ac9454c7c2f7feca4ee1082a3a930795a0a0160854f02b80694e391dc5da332689429a0012070859d154dfd0a70321365604516d2057af416e9e2361b4541fa30edf0b8ecd81b64ccba75f809d7be19a76a7e9c659577b260c3d2b8d2973555c0a9d29e6caba535c283e4bac93631c0c13088046c8e0ead5b5b85586192f34683b5a66ff240d54034fb78fa132be7cee21da7f5b56d35a4b3815819c7e0b8e23842b0f62b5d9", 0xd5}], 0x2, &(0x7f0000000300)=[@dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}, @prinfo={0x14}, @sndinfo={0x1c}, @prinfo={0x14}], 0x54}, 0x0)

17:57:27 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c)

17:57:27 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  878.585896][T11053] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  878.640691][T11053] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input21
17:57:27 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:27 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c)
bind$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c}, 0x1c)

[  878.802417][T11053] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
17:57:27 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000001700)={&(0x7f0000001600)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000200)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000040)={r2}, 0x8)

17:57:27 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000000), 0x4)

[  878.934104][T11053] usb 2-1: USB disconnect, device number 27
[  879.042327][ T3567] usb 4-1: new high-speed USB device number 39 using dummy_hcd
17:57:28 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:28 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xffffffff, 0x3cf4b1ec}, 0x10)

[  879.312299][ T3567] usb 4-1: Using ep0 maxpacket: 8
17:57:28 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  879.449664][ T3567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  879.461019][ T3567] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  879.470298][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  879.479590][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.661291][ T3567] usb 4-1: config 0 descriptor??
[  879.906691][T15241] usb 4-1: USB disconnect, device number 39
[  880.062972][ T3567] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  880.262141][ T3567] usb 2-1: device descriptor read/64, error 18
17:57:29 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00000001090224000100"], 0x0)

17:57:29 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f00000000c0)="e6", 0x1, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10)

17:57:29 executing program 5:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0)

17:57:29 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:29 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), &(0x7f0000000280)=0x90)

[  880.537646][ T3567] usb 2-1: new high-speed USB device number 29 using dummy_hcd
17:57:29 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:29 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000a40), &(0x7f0000000a80)=0x10)

17:57:29 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r1, r1)
r3 = dup2(r0, r2)
sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000600)=@in={0x10, 0x2}, 0x10)

17:57:29 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c)
bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c)

[  880.743232][ T3567] usb 2-1: device descriptor read/64, error 18
[  880.868902][ T3567] usb usb2-port1: attempt power cycle
17:57:29 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  881.132330][T15241] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  881.303079][ T3567] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  881.403234][T15241] usb 4-1: Using ep0 maxpacket: 8
17:57:30 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000002dc0)={&(0x7f0000001600)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000002fc0)=ANY=[@ANYBLOB="1400000084000000010000000500220a39ac01041c00000084"], 0xac}, 0x0)

[  881.546034][ T3567] usb 2-1: device descriptor read/8, error -61
[  881.553048][T15241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  881.563445][T15241] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  881.572779][T15241] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  881.582214][T15241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.611370][T15241] usb 4-1: config 0 descriptor??
[  881.832174][ T3567] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  881.867053][T15241] usb 4-1: USB disconnect, device number 40
[  882.013038][ T3567] usb 2-1: device descriptor read/8, error -61
[  882.139567][ T3567] usb usb2-port1: unable to enumerate USB device
17:57:31 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:31 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r1, r1)
r3 = dup2(r0, r2)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xa, &(0x7f0000000340)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x98)

17:57:31 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:31 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x88)

17:57:31 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
dup2(r0, r1)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x10)

17:57:31 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d8100"], 0x0)

17:57:32 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000340)={0x80}, 0x1)

17:57:32 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0)

[  883.222444][T15241] usb 4-1: new high-speed USB device number 41 using dummy_hcd
17:57:32 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@dstaddrv4={0x10, 0x84, 0x9}], 0x10}, 0x0)

17:57:32 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  883.463747][T15241] usb 4-1: Using ep0 maxpacket: 8
[  883.482359][ T3567] usb 2-1: new high-speed USB device number 32 using dummy_hcd
17:57:32 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  883.582956][T15241] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  883.591390][T15241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.601939][T15241] usb 4-1: config 0 has no interface number 0
[  883.608161][T15241] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  883.622497][T15241] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  883.631352][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
[  883.631678][T15241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.722352][ T3567] usb 2-1: device descriptor read/64, error 18
[  883.757482][T15241] usb 4-1: config 0 descriptor??
[  883.993065][ T3567] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  884.017886][T15241] usb 4-1: USB disconnect, device number 41
[  884.182678][ T3567] usb 2-1: device descriptor read/64, error 18
[  884.242398][T11053] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  884.305447][ T3567] usb usb2-port1: attempt power cycle
[  884.632940][T11053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  884.644767][T11053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  884.654787][T11053] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  884.667853][T11053] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  884.677122][T11053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.700452][T11053] usb 1-1: config 0 descriptor??
[  884.712274][ T3567] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  884.882254][ T3567] usb 2-1: device descriptor read/8, error -61
[  885.152287][ T3567] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  885.195270][T11053] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  885.215632][T11053] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input22
[  885.322305][ T3567] usb 2-1: device descriptor read/8, error -61
[  885.327031][T11053] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  885.423645][T15241] usb 1-1: USB disconnect, device number 7
[  885.442779][ T3567] usb usb2-port1: unable to enumerate USB device
17:57:35 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

17:57:35 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:35 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r1=>0x0})
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/119, 0x77}], 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/zoneinfo\x00', 0x0, 0x0)

17:57:35 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400010000"], 0x0)

17:57:35 executing program 0:
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d1f00020000000905050200de7e000009058b1e20"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r0, 0x5b04, 0x0)
write$char_usb(r0, 0x0, 0x0)

[  886.375959][T15759] ptrace attach of "/root/syz-executor.5 exec"[3514] was attempted by "/root/syz-executor.5 exec"[15759]
17:57:35 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

17:57:35 executing program 5:
select(0x0, 0x0, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00))

[  886.562386][T11053] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  886.612524][T15241] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  886.751382][    T7] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  886.802385][T11053] usb 1-1: Using ep0 maxpacket: 8
17:57:35 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:35 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0)

17:57:35 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13)

[  886.862035][T15241] usb 4-1: Using ep0 maxpacket: 8
[  886.937477][T11053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  886.952297][T11053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  886.964370][T11053] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  886.974644][T11053] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  886.984740][T11053] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  886.985550][T15241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  886.994019][T11053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.995318][    T7] usb 2-1: device descriptor read/64, error 18
[  887.004429][T15241] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  887.028136][T15241] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  887.037442][T15241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.073358][T15241] usb 4-1: config 0 descriptor??
[  887.278615][T11053] usb 1-1: config 0 descriptor??
[  887.292446][    T7] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  887.319921][T15241] usb 4-1: USB disconnect, device number 42
[  887.502581][    T7] usb 2-1: device descriptor read/64, error 18
[  887.552652][T11053] usb 1-1: usb_control_msg returned -71
[  887.562695][T11053] usbtmc 1-1:0.0: can't read capabilities
[  887.622992][    T7] usb usb2-port1: attempt power cycle
[  887.653848][T11053] usb 1-1: USB disconnect, device number 8
[  888.082219][    T7] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  888.302440][    T7] usb 2-1: device descriptor read/8, error -61
[  888.584065][    T7] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  888.762896][    T7] usb 2-1: device descriptor read/8, error -61
[  888.882382][    T7] usb usb2-port1: unable to enumerate USB device
17:57:38 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:38 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, 0x0, 0x0)

17:57:38 executing program 5:
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

17:57:38 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400010000"], 0x0)

17:57:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1=0xe0000005}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfd}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)

[  889.535486][T15780] IPv6: sit1: Disabled Multicast RS
17:57:38 executing program 5:
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)

17:57:38 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:38 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0)

17:57:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1=0xe0000005}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfd}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0)

[  889.914133][    T7] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  889.942835][T11053] usb 2-1: new high-speed USB device number 40 using dummy_hcd
17:57:39 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

17:57:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000480), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
fstat(r2, &(0x7f00000000c0))
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCGETA(r3, 0x5405, 0x0)

[  890.143395][T11053] usb 2-1: device descriptor read/64, error 18
[  890.172316][    T7] usb 4-1: Using ep0 maxpacket: 8
[  890.293438][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  890.304298][    T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  890.313745][    T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  890.325999][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.409008][    T7] usb 4-1: config 0 descriptor??
[  890.443485][T11053] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  890.642064][T11053] usb 2-1: device descriptor read/64, error 18
[  890.667914][    T7] usb 4-1: USB disconnect, device number 43
[  890.762864][T11053] usb usb2-port1: attempt power cycle
[  891.182244][T11053] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  891.373937][T11053] usb 2-1: device descriptor read/8, error -61
[  891.672080][T11053] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  891.862348][T11053] usb 2-1: device descriptor read/8, error -61
[  891.982529][T11053] usb usb2-port1: unable to enumerate USB device
17:57:41 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:41 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:41 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="bd", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="c4", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)

17:57:41 executing program 5:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
r1 = getpid()
kcmp(r1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

17:57:41 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400010000"], 0x0)

17:57:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000480), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
fstat(r2, &(0x7f00000000c0))
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCGETA(r3, 0x5405, 0x0)

17:57:41 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:41 executing program 5:
fork()
getpid()
signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x80000)
getpid()
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380))
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000200))
r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x42081)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x1})

[  893.083364][T11053] usb 4-1: new high-speed USB device number 44 using dummy_hcd
17:57:42 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140))

[  893.182157][ T3567] usb 2-1: new high-speed USB device number 44 using dummy_hcd
17:57:42 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  893.332588][T11053] usb 4-1: Using ep0 maxpacket: 8
[  893.422650][ T3567] usb 2-1: device descriptor read/64, error 18
[  893.454623][T11053] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.465087][T11053] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  893.474450][T11053] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  893.483735][T11053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:57:42 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080))
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  893.581042][T15817] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #1
17:57:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x800000000080002, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="300000001000010800000000000000c805000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0)

[  893.680407][T11053] usb 4-1: config 0 descriptor??
[  893.692804][ T3567] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  893.892327][ T3567] usb 2-1: device descriptor read/64, error 18
[  893.927824][T11053] usb 4-1: USB disconnect, device number 44
[  894.013099][ T3567] usb usb2-port1: attempt power cycle
[  894.232952][T15826] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  894.432005][ T3567] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  894.612861][ T3567] usb 2-1: device descriptor read/8, error -61
[  894.902203][ T3567] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  895.072352][ T3567] usb 2-1: device descriptor read/8, error -61
[  895.192660][ T3567] usb usb2-port1: unable to enumerate USB device
17:57:44 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140))

17:57:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x800000000080002, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="300000001000010800000000000000c805000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b"], 0x30}}, 0x0)

17:57:44 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400010000000009044100"], 0x0)

17:57:44 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080))
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:44 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x10001, 0x8, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1ffff000, 0x12, r0, 0x0)

[  896.026893][T15837] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
17:57:45 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/2605], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffffffffffffff8)
bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14, 0x800)
openat$sysfs(0xffffff9c, &(0x7f0000000640)='/sys/kernel/software_nodes', 0x0, 0x43)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe28, 0xfffffe0a, &(0x7f0000000100)="280e00034305607e5bc5795e6558600800ffffffba0e7231ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500000000120000000000000000"}, 0x28)

17:57:45 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080))
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:45 executing program 2:
syz_mount_image$reiserfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB='jqfmt=vfsv0'])

17:57:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="850000000700000025000000000000089500000000000000cf86f547728f7fd62efec9bc7cba134e7b06d8491b28add6577ed004c59d08f9b1e2f65227d090dbf4dcadf4621c26a97457f3946534d529cf85b55702a4f804000000f9d115e02475115a3ca275306ec69f21a5663130f6aa75fb6f496624df0ea8c77f2b16173aa4c24644f41a6626f3d7655440e1f0d20e2c5e984756e32bb6fabebc06fcf98097dc4e20e8f6683d4520e141051e8da5e74a0072b6d49ac9efc03f18ab0c92eb849f267e9a88a45d685136bd33b0e3f8400b33b4a1b67ad3ed6c4b161acbb872296c3b0f05b4f1490c6d0cc64454e5a0bea54af3fc6c49f1bc63ae54e0d82f1704d9ffc1545dc37736513e9d412ceb03749826c3e648599a413b46ba3df5dad48836e55d9bc34bf630d3f43a5da5963d51f2527b9e0df2e522f46221186fe7577bc2f4648979b50fb8253a96b393bfe9d735e234d7cdea2a779201cb3e433519b436a99c7c818e0e3fa984f3c89b9ca12ae9458ef2e116f7270de1edad3392c3c622708845ea6e69f6f4a20d7e18db74093919325cc95a4d48727939bff66469201b626b55aac478d06f5e8c54eff0d6011ead14a1ec6078f5de980a3456ff1a31d5984422b21ecc4442ccf4e7a2d478ec8a3de4c9e57ebedbbf568843d001e8ae464ce8bd9faea0dfc6fe437f568ddb8df52559c087eb4e0a4bc81b1363d99d5072795d3209e87cf316588994a5ad04dee870ea9f2437860b9140cee7efe0bfb2220f0b571638765ee1f030f973a2b57fdb64c990500f731b7332b4fba5298c0c0ecdccf4581f0a72ef26845f99f055c784f7f226fcfbf92db65797e6d9c6079f22936a2f48a5e747772ee0718a7f6a61b006a49debdb1e9afc3f9392ff7d41ffbf7ee5eb488c1de1d7abd153ce81db970b4915c6fccbd6eb11328f6d96a59a254f117933bc6340eee771f79f90a5c851c40acc125ac6acd682ac8ef6f393e5a69d034c5b6ebaffca972231f831685ea7eeb2aaa64e0004070bcbb91e545103e6a47180ad68113873ae89560e8241b8e09ffec1dfd566822d495ab4bc2c9a2f16463b80c4c55d3fcdd47ba6478f10a59dae536dce86e97aa8ab91b3314122ceca33988a79de3a7355d063882a917a09c1b3c7d0eef9515d9fcde7582d3978062581368c4073ca0caaa18fb232bb946abdd00de773ed973010b00d43fc4b5263e45f81fd6ebc632f22dad4c75207d7d701a428e7d60a726c8c8528fe6920e8fa5132fb9ef1d0d31edabf947c19480cc44b9e01be1370dcd6fc05327f545bd753ee5b021c76388ff0ac6a922ea2d654d11c3d2c3be4cf9a50ceb519e95a43a3903bbb2720f73b767a653759ca2ac302d423bd89ab641040ee3200000000d030b25fa0a68d5e732afae80a09801688f8e121dfacd0abb572280230b47f1dc1be0b152a6b5a2a652617026fb8ec66fd0f640168a90d0a440699a88b5d59bd96e2c5a8c67a15f27722695d548f0b900344b36433d7cb88878946500731f8df6ccf9ec2ed12e5e278228f75fcca5381919aef126834c2b53e17635321738f44ece50dc61fb368c53d1dfbe11153c91dd59a0d6354d8b635"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140))

[  896.342455][ T3567] usb 4-1: new high-speed USB device number 45 using dummy_hcd
17:57:45 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  896.482502][    T7] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  896.582658][ T3567] usb 4-1: Using ep0 maxpacket: 8
[  896.685297][    T7] usb 2-1: device descriptor read/64, error 18
[  896.705833][T15847] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2
[  896.712591][ T3567] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  896.724548][ T3567] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  896.734971][ T3567] usb 4-1: config 0 has no interface number 0
[  896.741217][ T3567] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  896.751025][ T3567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.962316][    T7] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  897.019944][ T3567] usb 4-1: config 0 descriptor??
17:57:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140))

17:57:46 executing program 2:
syz_io_uring_setup(0x5b35, &(0x7f0000000200)={0x0, 0xdeb3, 0x3b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

[  897.152609][    T7] usb 2-1: device descriptor read/64, error 18
[  897.268600][T11053] usb 4-1: USB disconnect, device number 45
[  897.283903][    T7] usb usb2-port1: attempt power cycle
[  897.718813][    T7] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  897.942445][    T7] usb 2-1: device descriptor read/8, error -61
[  898.232227][    T7] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  898.422455][    T7] usb 2-1: device descriptor read/8, error -61
[  898.542777][    T7] usb usb2-port1: unable to enumerate USB device
17:57:48 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:48 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:48 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20424, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x80401, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1}, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004980)={0x2020}, 0x2020)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000025008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

17:57:48 executing program 0:
syz_mount_image$gfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f0000002ac0))

17:57:48 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400010000000009044100"], 0x0)

17:57:48 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000000900030073797a310000000014000000020a090000000000000000000200000614000000110001aee4285a7c572fb51ba1ad1577ef6d7ed1a10daf5bba642c13d963b71a9666011edcc6"], 0x94}}, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)={0x3f00})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002800)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x914, 0xe, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8ec, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "7c87f9e608137b7f719a42c8b57c09a3da6447178a8fbea0890fd74c5896f722b26faa9ea718783fcaae9a6d6dd827d3a422804c8c0a9b38d33f3cbea40a24a9dca14eef4ac64aad7d2eaede6381f8b96fb0e1afa5209a477b9931e0"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "b128493e250836a35fd140563ac594b361cc198f808730529b4b86c5fd1cfce0195a3405741a371dcf9fb9e9234a89f6b3771836a1853099fe8ee961013d582720ebad73f7f5aa52569b1716ab36b65485786c1e9e2a332e1b4abf0831ec65149984d7e9228466ed6afbc68631172f6553563f900e62a461949c06461726259aa687dc05190f8085c9b21470285e2fa238eb98e85ad2afd5266f70168b4956324dc6d4f3f2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x29c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8a6d648233f7cd48283a08b6a1b65a4bcfa9c6cb9b930afca69d12257b2012faec340688f27420c0ab12a2e325ff95de29d4d257216a53c8ff34b5d5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "b8d74e69d819ee4618015b2a95ed47535915c3070eee459893c0b8cb78"}, @NFTA_DATA_VALUE={0x36, 0x1, "194b038fc9a40b2acddab281cf3d0db687053e5bca350d54a31541ad477e2cfacd494390de98a1f260d9c38624cb6c876abb"}, @NFTA_DATA_VALUE={0xf5, 0x1, "0070b1846e016cb90368adfa2810b4642d02141fb2ddb565bc8b77bd1e6f3576a88f1d5f1da56f480a7e1bc265bdf06a9f43d772c7a457b041160c7b85766d3659031d0afb61e5724c02d408bcc62a00f0a8a0c28c722db09768efcdecd2e50601a351ea361b858df777c5ea5fb6301e9c49b575ff01b72a22c8e4e4792e4d2b8802a5859bd2467e45375eff527dca7d9bf24505c9852711dd7d99a82d3e2047208cc3626f748e4e1bf2200d6dedbd4364fdd1c2721508b07abe55e62f57219122ea8ad1a80858e3a33450fa819131dec9aedc39ca9a5f4c8b0dcc39e525295d12ba83c46f6f7f11b51bc35f6619aec4e6"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xca, 0x1, "20600bf7a516fc3fb5f22b0ae535a1b980ed6319feba1d73476f5d0788dd63ab57890108ec0a861375aa46be1df23c0167c75327004f3e0807cac20b6a80bbaefc7e81d34d6fbc77cd4e58da63fde13e8686f5e1d780851375342e47eeda9fca96d6f4685c38d62f2a01ff5880a5501f0183da2c915e88c416da0d75ed3a07dc2ac091885586b0d3590bb7624a60eb03c7f23f7515a293ba5f977185b1845fa28002ebeeb685388b7b06172e3a0d24fffb8cecf52df2b25e1dde59326644725c19fe02f60d41"}, @NFTA_DATA_VALUE={0x15, 0x1, "079a5703ce50f42b3bb617d6717fc6777f"}, @NFTA_DATA_VALUE={0xde, 0x1, "f53a9aa5bfde7a4fed5b135d37ddf72775c1c864fb05bf5942b9512ba9a206aad53225a805585deaa709a82ac972504f87c0e5b284826b6d9c78403c4d0e7f75e992fd326d0c527f50234dab279e44074c832af7be428554a3cedcfb9eaec215e709514509a66a7112475a254394bf04fc6b0271e31a1cc819fcefbb79cca3c0b683f0841db7a9cb5193c73d8f201bbcea3fda8d60b4f9e5cd7a8418d90f531fc94a31e182bb94ff86131a6346fafe79ac528798bd8f8958f0a0070c70b6d1a610067940726222fce85df5b65abce3def2ce404237f610948e9e"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "de35ef8cd1c9c4aff0a6db00c050dcb145e80838c2038d9dbcee11db2db18f1030e8a8d0eec3754f26a870707df073a08e8f"}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9170cca354b740588eab0620064dc70c3a37e9a0edb925af7e5546ca8d1b229aab7a0989dfbeb2340f6e70fe5e243e0a9dff21b7767c92a6c9d39012c0cf7ed38697dd03265869b4dbafccc31daee2c137ffe4357434939d27547ee0bceec057f1040e5d295c5bdb4033ac4d91ee7450a2296091bc929003bc09f639ff860122a6785034c0fd142a2de580e47aff875eb1513fc9553ca7db3720574785215c8ecb15bee7d60a3d54788c976ae276733ce54c2cd28ad4cfba8938bbb90deea72f3ea8c158fc7312"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14}}, 0xa24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)

[  899.393444][T15863] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'.
17:57:48 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:48 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="c2"})

17:57:48 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000000900030073797a310000000014000000020a090000000000000000000200000614000000110001aee4285a7c572fb51ba1ad1577ef6d7ed1a10daf5bba642c13d963b71a9666011edcc6"], 0x94}}, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)={0x3f00})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002800)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x914, 0xe, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8ec, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "7c87f9e608137b7f719a42c8b57c09a3da6447178a8fbea0890fd74c5896f722b26faa9ea718783fcaae9a6d6dd827d3a422804c8c0a9b38d33f3cbea40a24a9dca14eef4ac64aad7d2eaede6381f8b96fb0e1afa5209a477b9931e0"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "b128493e250836a35fd140563ac594b361cc198f808730529b4b86c5fd1cfce0195a3405741a371dcf9fb9e9234a89f6b3771836a1853099fe8ee961013d582720ebad73f7f5aa52569b1716ab36b65485786c1e9e2a332e1b4abf0831ec65149984d7e9228466ed6afbc68631172f6553563f900e62a461949c06461726259aa687dc05190f8085c9b21470285e2fa238eb98e85ad2afd5266f70168b4956324dc6d4f3f2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x29c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8a6d648233f7cd48283a08b6a1b65a4bcfa9c6cb9b930afca69d12257b2012faec340688f27420c0ab12a2e325ff95de29d4d257216a53c8ff34b5d5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "b8d74e69d819ee4618015b2a95ed47535915c3070eee459893c0b8cb78"}, @NFTA_DATA_VALUE={0x36, 0x1, "194b038fc9a40b2acddab281cf3d0db687053e5bca350d54a31541ad477e2cfacd494390de98a1f260d9c38624cb6c876abb"}, @NFTA_DATA_VALUE={0xf5, 0x1, "0070b1846e016cb90368adfa2810b4642d02141fb2ddb565bc8b77bd1e6f3576a88f1d5f1da56f480a7e1bc265bdf06a9f43d772c7a457b041160c7b85766d3659031d0afb61e5724c02d408bcc62a00f0a8a0c28c722db09768efcdecd2e50601a351ea361b858df777c5ea5fb6301e9c49b575ff01b72a22c8e4e4792e4d2b8802a5859bd2467e45375eff527dca7d9bf24505c9852711dd7d99a82d3e2047208cc3626f748e4e1bf2200d6dedbd4364fdd1c2721508b07abe55e62f57219122ea8ad1a80858e3a33450fa819131dec9aedc39ca9a5f4c8b0dcc39e525295d12ba83c46f6f7f11b51bc35f6619aec4e6"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xca, 0x1, "20600bf7a516fc3fb5f22b0ae535a1b980ed6319feba1d73476f5d0788dd63ab57890108ec0a861375aa46be1df23c0167c75327004f3e0807cac20b6a80bbaefc7e81d34d6fbc77cd4e58da63fde13e8686f5e1d780851375342e47eeda9fca96d6f4685c38d62f2a01ff5880a5501f0183da2c915e88c416da0d75ed3a07dc2ac091885586b0d3590bb7624a60eb03c7f23f7515a293ba5f977185b1845fa28002ebeeb685388b7b06172e3a0d24fffb8cecf52df2b25e1dde59326644725c19fe02f60d41"}, @NFTA_DATA_VALUE={0x15, 0x1, "079a5703ce50f42b3bb617d6717fc6777f"}, @NFTA_DATA_VALUE={0xde, 0x1, "f53a9aa5bfde7a4fed5b135d37ddf72775c1c864fb05bf5942b9512ba9a206aad53225a805585deaa709a82ac972504f87c0e5b284826b6d9c78403c4d0e7f75e992fd326d0c527f50234dab279e44074c832af7be428554a3cedcfb9eaec215e709514509a66a7112475a254394bf04fc6b0271e31a1cc819fcefbb79cca3c0b683f0841db7a9cb5193c73d8f201bbcea3fda8d60b4f9e5cd7a8418d90f531fc94a31e182bb94ff86131a6346fafe79ac528798bd8f8958f0a0070c70b6d1a610067940726222fce85df5b65abce3def2ce404237f610948e9e"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "de35ef8cd1c9c4aff0a6db00c050dcb145e80838c2038d9dbcee11db2db18f1030e8a8d0eec3754f26a870707df073a08e8f"}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9170cca354b740588eab0620064dc70c3a37e9a0edb925af7e5546ca8d1b229aab7a0989dfbeb2340f6e70fe5e243e0a9dff21b7767c92a6c9d39012c0cf7ed38697dd03265869b4dbafccc31daee2c137ffe4357434939d27547ee0bceec057f1040e5d295c5bdb4033ac4d91ee7450a2296091bc929003bc09f639ff860122a6785034c0fd142a2de580e47aff875eb1513fc9553ca7db3720574785215c8ecb15bee7d60a3d54788c976ae276733ce54c2cd28ad4cfba8938bbb90deea72f3ea8c158fc7312"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14}}, 0xa24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)

17:57:48 executing program 2:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="e0", 0x1}], 0x1}, 0x0)

[  899.802405][    T7] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  899.970068][T11053] usb 2-1: new high-speed USB device number 52 using dummy_hcd
17:57:49 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:49 executing program 0:
syz_usb_connect(0x0, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000013a16e40110f3510ff95000000010902a0a3727b000000090400000149284800090500000000000000070589cf"], 0x0)

[  900.702895][    T7] usb 4-1: Using ep0 maxpacket: 8
[  900.853399][    T7] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  900.861742][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  900.875255][    T7] usb 4-1: config 0 has no interface number 0
[  900.882186][    T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  900.891446][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.928617][    T7] usb 4-1: config 0 descriptor??
[  901.032526][T11053] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  901.043303][T11053] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  901.052553][T11053] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  901.061753][T11053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.169144][T11053] usb 2-1: config 0 descriptor??
[  901.190301][    T7] usb 4-1: USB disconnect, device number 46
[  901.212363][ T3567] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  901.583021][ T3567] usb 1-1: config index 0 descriptor too short (expected 41888, got 34)
[  901.593868][ T3567] usb 1-1: config 123 has too many interfaces: 114, using maximum allowed: 32
[  901.603605][ T3567] usb 1-1: config 123 has 1 interface, different from the descriptor's value: 114
[  901.613072][ T3567] usb 1-1: config 123 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  901.624018][ T3567] usb 1-1: config 123 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  901.635326][ T3567] usb 1-1: config 123 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  901.645546][ T3567] usb 1-1: config 123 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  901.659065][ T3567] usb 1-1: New USB device found, idVendor=0f11, idProduct=1035, bcdDevice=95.ff
[  901.668482][ T3567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.728003][ T3567] ldusb 1-1:123.0: Interrupt out endpoint not found (using control endpoint instead)
[  901.760933][ T3567] ldusb 1-1:123.0: LD USB Device #0 now attached to major 180 minor 0
[  901.930107][ T3567] usb 1-1: USB disconnect, device number 9
[  901.941713][ T3567] ldusb 1-1:123.0: LD USB Device #0 now disconnected
17:57:51 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:51 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d810009050f1f01000000000905830300b3"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00007c0000007c00845a3cecd9d49177a8428c92335875eb29d73cc75dfbe954518f0f801a9c38d195cc1eb984b24b27a8fef8c43ff0d67123d688eda9c15f02a70bca61f6467954010800000000000000d397a525707e2745f2490428056de390a59fe1299723f557b848bdcf16faa481a3b848811a62a66ae99e994852914e2d86"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])

17:57:51 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000000900030073797a310000000014000000020a090000000000000000000200000614000000110001aee4285a7c572fb51ba1ad1577ef6d7ed1a10daf5bba642c13d963b71a9666011edcc6"], 0x94}}, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)={0x3f00})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002800)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x914, 0xe, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8ec, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "7c87f9e608137b7f719a42c8b57c09a3da6447178a8fbea0890fd74c5896f722b26faa9ea718783fcaae9a6d6dd827d3a422804c8c0a9b38d33f3cbea40a24a9dca14eef4ac64aad7d2eaede6381f8b96fb0e1afa5209a477b9931e0"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "b128493e250836a35fd140563ac594b361cc198f808730529b4b86c5fd1cfce0195a3405741a371dcf9fb9e9234a89f6b3771836a1853099fe8ee961013d582720ebad73f7f5aa52569b1716ab36b65485786c1e9e2a332e1b4abf0831ec65149984d7e9228466ed6afbc68631172f6553563f900e62a461949c06461726259aa687dc05190f8085c9b21470285e2fa238eb98e85ad2afd5266f70168b4956324dc6d4f3f2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x29c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8a6d648233f7cd48283a08b6a1b65a4bcfa9c6cb9b930afca69d12257b2012faec340688f27420c0ab12a2e325ff95de29d4d257216a53c8ff34b5d5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "b8d74e69d819ee4618015b2a95ed47535915c3070eee459893c0b8cb78"}, @NFTA_DATA_VALUE={0x36, 0x1, "194b038fc9a40b2acddab281cf3d0db687053e5bca350d54a31541ad477e2cfacd494390de98a1f260d9c38624cb6c876abb"}, @NFTA_DATA_VALUE={0xf5, 0x1, "0070b1846e016cb90368adfa2810b4642d02141fb2ddb565bc8b77bd1e6f3576a88f1d5f1da56f480a7e1bc265bdf06a9f43d772c7a457b041160c7b85766d3659031d0afb61e5724c02d408bcc62a00f0a8a0c28c722db09768efcdecd2e50601a351ea361b858df777c5ea5fb6301e9c49b575ff01b72a22c8e4e4792e4d2b8802a5859bd2467e45375eff527dca7d9bf24505c9852711dd7d99a82d3e2047208cc3626f748e4e1bf2200d6dedbd4364fdd1c2721508b07abe55e62f57219122ea8ad1a80858e3a33450fa819131dec9aedc39ca9a5f4c8b0dcc39e525295d12ba83c46f6f7f11b51bc35f6619aec4e6"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xca, 0x1, "20600bf7a516fc3fb5f22b0ae535a1b980ed6319feba1d73476f5d0788dd63ab57890108ec0a861375aa46be1df23c0167c75327004f3e0807cac20b6a80bbaefc7e81d34d6fbc77cd4e58da63fde13e8686f5e1d780851375342e47eeda9fca96d6f4685c38d62f2a01ff5880a5501f0183da2c915e88c416da0d75ed3a07dc2ac091885586b0d3590bb7624a60eb03c7f23f7515a293ba5f977185b1845fa28002ebeeb685388b7b06172e3a0d24fffb8cecf52df2b25e1dde59326644725c19fe02f60d41"}, @NFTA_DATA_VALUE={0x15, 0x1, "079a5703ce50f42b3bb617d6717fc6777f"}, @NFTA_DATA_VALUE={0xde, 0x1, "f53a9aa5bfde7a4fed5b135d37ddf72775c1c864fb05bf5942b9512ba9a206aad53225a805585deaa709a82ac972504f87c0e5b284826b6d9c78403c4d0e7f75e992fd326d0c527f50234dab279e44074c832af7be428554a3cedcfb9eaec215e709514509a66a7112475a254394bf04fc6b0271e31a1cc819fcefbb79cca3c0b683f0841db7a9cb5193c73d8f201bbcea3fda8d60b4f9e5cd7a8418d90f531fc94a31e182bb94ff86131a6346fafe79ac528798bd8f8958f0a0070c70b6d1a610067940726222fce85df5b65abce3def2ce404237f610948e9e"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "de35ef8cd1c9c4aff0a6db00c050dcb145e80838c2038d9dbcee11db2db18f1030e8a8d0eec3754f26a870707df073a08e8f"}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9170cca354b740588eab0620064dc70c3a37e9a0edb925af7e5546ca8d1b229aab7a0989dfbeb2340f6e70fe5e243e0a9dff21b7767c92a6c9d39012c0cf7ed38697dd03265869b4dbafccc31daee2c137ffe4357434939d27547ee0bceec057f1040e5d295c5bdb4033ac4d91ee7450a2296091bc929003bc09f639ff860122a6785034c0fd142a2de580e47aff875eb1513fc9553ca7db3720574785215c8ecb15bee7d60a3d54788c976ae276733ce54c2cd28ad4cfba8938bbb90deea72f3ea8c158fc7312"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14}}, 0xa24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)

17:57:51 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400010000000009044100"], 0x0)

17:57:51 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:51 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0)
ftruncate(r0, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x17d)
r1 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, r1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16, @ANYRES16=r1, @ANYRES64, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40010)

[  902.601178][ T3564] usb 2-1: USB disconnect, device number 52
[  903.078305][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
17:57:52 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
epoll_wait(r2, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:52 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000000a01010000000000000000020000000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000000900030073797a310000000014000000020a090000000000000000000200000614000000110001aee4285a7c572fb51ba1ad1577ef6d7ed1a10daf5bba642c13d963b71a9666011edcc6"], 0x94}}, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)={0x3f00})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000002800)={{0x14}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x914, 0xe, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8ec, 0x3, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "7c87f9e608137b7f719a42c8b57c09a3da6447178a8fbea0890fd74c5896f722b26faa9ea718783fcaae9a6d6dd827d3a422804c8c0a9b38d33f3cbea40a24a9dca14eef4ac64aad7d2eaede6381f8b96fb0e1afa5209a477b9931e0"}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "b128493e250836a35fd140563ac594b361cc198f808730529b4b86c5fd1cfce0195a3405741a371dcf9fb9e9234a89f6b3771836a1853099fe8ee961013d582720ebad73f7f5aa52569b1716ab36b65485786c1e9e2a332e1b4abf0831ec65149984d7e9228466ed6afbc68631172f6553563f900e62a461949c06461726259aa687dc05190f8085c9b21470285e2fa238eb98e85ad2afd5266f70168b4956324dc6d4f3f2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x29c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x40, 0x1, "8a6d648233f7cd48283a08b6a1b65a4bcfa9c6cb9b930afca69d12257b2012faec340688f27420c0ab12a2e325ff95de29d4d257216a53c8ff34b5d5"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000006}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "b8d74e69d819ee4618015b2a95ed47535915c3070eee459893c0b8cb78"}, @NFTA_DATA_VALUE={0x36, 0x1, "194b038fc9a40b2acddab281cf3d0db687053e5bca350d54a31541ad477e2cfacd494390de98a1f260d9c38624cb6c876abb"}, @NFTA_DATA_VALUE={0xf5, 0x1, "0070b1846e016cb90368adfa2810b4642d02141fb2ddb565bc8b77bd1e6f3576a88f1d5f1da56f480a7e1bc265bdf06a9f43d772c7a457b041160c7b85766d3659031d0afb61e5724c02d408bcc62a00f0a8a0c28c722db09768efcdecd2e50601a351ea361b858df777c5ea5fb6301e9c49b575ff01b72a22c8e4e4792e4d2b8802a5859bd2467e45375eff527dca7d9bf24505c9852711dd7d99a82d3e2047208cc3626f748e4e1bf2200d6dedbd4364fdd1c2721508b07abe55e62f57219122ea8ad1a80858e3a33450fa819131dec9aedc39ca9a5f4c8b0dcc39e525295d12ba83c46f6f7f11b51bc35f6619aec4e6"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x208, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xca, 0x1, "20600bf7a516fc3fb5f22b0ae535a1b980ed6319feba1d73476f5d0788dd63ab57890108ec0a861375aa46be1df23c0167c75327004f3e0807cac20b6a80bbaefc7e81d34d6fbc77cd4e58da63fde13e8686f5e1d780851375342e47eeda9fca96d6f4685c38d62f2a01ff5880a5501f0183da2c915e88c416da0d75ed3a07dc2ac091885586b0d3590bb7624a60eb03c7f23f7515a293ba5f977185b1845fa28002ebeeb685388b7b06172e3a0d24fffb8cecf52df2b25e1dde59326644725c19fe02f60d41"}, @NFTA_DATA_VALUE={0x15, 0x1, "079a5703ce50f42b3bb617d6717fc6777f"}, @NFTA_DATA_VALUE={0xde, 0x1, "f53a9aa5bfde7a4fed5b135d37ddf72775c1c864fb05bf5942b9512ba9a206aad53225a805585deaa709a82ac972504f87c0e5b284826b6d9c78403c4d0e7f75e992fd326d0c527f50234dab279e44074c832af7be428554a3cedcfb9eaec215e709514509a66a7112475a254394bf04fc6b0271e31a1cc819fcefbb79cca3c0b683f0841db7a9cb5193c73d8f201bbcea3fda8d60b4f9e5cd7a8418d90f531fc94a31e182bb94ff86131a6346fafe79ac528798bd8f8958f0a0070c70b6d1a610067940726222fce85df5b65abce3def2ce404237f610948e9e"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "de35ef8cd1c9c4aff0a6db00c050dcb145e80838c2038d9dbcee11db2db18f1030e8a8d0eec3754f26a870707df073a08e8f"}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "9170cca354b740588eab0620064dc70c3a37e9a0edb925af7e5546ca8d1b229aab7a0989dfbeb2340f6e70fe5e243e0a9dff21b7767c92a6c9d39012c0cf7ed38697dd03265869b4dbafccc31daee2c137ffe4357434939d27547ee0bceec057f1040e5d295c5bdb4033ac4d91ee7450a2296091bc929003bc09f639ff860122a6785034c0fd142a2de580e47aff875eb1513fc9553ca7db3720574785215c8ecb15bee7d60a3d54788c976ae276733ce54c2cd28ad4cfba8938bbb90deea72f3ea8c158fc7312"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14}}, 0xa24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)

[  903.753630][T11053] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  903.929166][ T3560] usb 2-1: new high-speed USB device number 53 using dummy_hcd
17:57:52 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
fcntl$dupfd(r1, 0x0, r1)
epoll_wait(0xffffffffffffffff, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  904.012470][    T7] usb 3-1: Using ep0 maxpacket: 8
[  904.053433][T11053] usb 4-1: Using ep0 maxpacket: 8
[  904.392155][    T7] usb 3-1: config 0 has an invalid interface number: 65 but max is 0
[  904.400484][    T7] usb 3-1: config 0 has no interface number 0
[  904.407639][    T7] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  904.420522][    T7] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  904.431870][    T7] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  904.443510][    T7] usb 3-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  904.457027][    T7] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  904.466444][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.513133][T11053] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  904.521480][T11053] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  904.532191][T11053] usb 4-1: config 0 has no interface number 0
[  904.538449][T11053] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  904.547735][T11053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:57:54 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
fcntl$dupfd(r1, 0x0, r1)
epoll_wait(0xffffffffffffffff, &(0x7f0000002840)=[{}], 0x1, 0x0)

[  905.918393][T11053] usb 4-1: config 0 descriptor??
[  905.926288][    T7] usb 3-1: config 0 descriptor??
[  905.949735][    T7] usb 3-1: can't set config #0, error -71
17:57:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x849}]})

17:57:54 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d"], 0x0)

[  905.963496][T11053] usb 4-1: can't set config #0, error -71
[  906.040664][    T7] usb 3-1: USB disconnect, device number 10
[  906.058659][T11053] usb 4-1: USB disconnect, device number 47
17:57:55 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:55 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="95431c6d7849cca0b53072718f6594e564fbfdf59a18925d3fba68e41909fb3f9a0332e2aabcca8f6cf7bb6743e1e448ffa3a656924187a90101", 0x3a}, {&(0x7f0000000280)="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", 0x7c7}], 0x2}, 0x0)

[  906.112154][ T3560] usb 2-1: unable to read config index 0 descriptor/all
[  906.119871][ T3560] usb 2-1: can't read configurations, error -71
17:57:55 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
fcntl$dupfd(r1, 0x0, r1)
epoll_wait(0xffffffffffffffff, &(0x7f0000002840)=[{}], 0x1, 0x0)

17:57:55 executing program 5:
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6)

17:57:55 executing program 0:
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
nanosleep(&(0x7f0000000000), &(0x7f0000000040))

17:57:55 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz0\x00'})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[  906.852662][ T3560] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  906.872939][    T7] usb 4-1: new high-speed USB device number 48 using dummy_hcd
17:57:55 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, 0x0, 0x0, 0x0)

17:57:56 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T', 0x0)
fallocate(r0, 0x0, 0x0, 0x400001)

17:57:56 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000), 0xffffffffffffffba, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0xf0ff7f, 0x0)

[  907.142507][    T7] usb 4-1: Using ep0 maxpacket: 8
[  907.157235][T15936] input: syz0 as /devices/virtual/input/input23
[  907.283019][    T7] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  907.291346][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.302205][    T7] usb 4-1: config 0 has no interface number 0
[  907.308508][    T7] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  907.322033][    T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  907.331314][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.341439][ T3560] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.351742][ T3560] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  907.361002][ T3560] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  907.370310][ T3560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:57:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0)

17:57:56 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, 0x0, 0x0, 0x0)

[  907.543113][ T3560] usb 2-1: config 0 descriptor??
[  907.568212][    T7] usb 4-1: config 0 descriptor??
[  907.825010][    T7] usb 4-1: USB disconnect, device number 48
17:57:57 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d"], 0x0)

[  908.842261][ T3560] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  909.102140][ T3560] usb 4-1: Using ep0 maxpacket: 8
[  909.252463][ T3560] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  909.260812][ T3560] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  909.274345][ T3560] usb 4-1: config 0 has no interface number 0
[  909.280570][ T3560] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  909.294415][ T3560] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  909.303719][ T3560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.322604][ T3560] usb 4-1: config 0 descriptor??
17:57:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:57:58 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x8}, &(0x7f0000000140))

17:57:58 executing program 0:
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)

17:57:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x2, 0x3}, 0xc)

17:57:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, 0x0, 0x0, 0x0)

[  909.419339][ T3560] usb 2-1: USB disconnect, device number 54
[  909.567586][ T3564] usb 4-1: USB disconnect, device number 49
17:57:58 executing program 2:
setrlimit(0x8, &(0x7f0000000080))
socket$unix(0x1, 0x2, 0x0)

17:57:58 executing program 0:
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000006000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

17:57:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840), 0x0, 0x0)

17:57:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000040)=""/137, 0x89)

[  910.053339][ T3567] usb 2-1: new high-speed USB device number 55 using dummy_hcd
17:57:59 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)

17:57:59 executing program 2:
r0 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

17:57:59 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d"], 0x0)

[  910.413005][   T24] audit: type=1400 audit(1640541479.360:175): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15970 comm="syz-executor.2"
[  910.423200][ T3567] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  910.440120][ T3567] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  910.453826][ T3567] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  910.463154][ T3567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.591433][ T3567] usb 2-1: config 0 descriptor??
[  910.646293][ T3567] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  910.835125][ T3560] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  911.082182][ T3560] usb 4-1: Using ep0 maxpacket: 8
[  911.202564][ T3560] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  911.213849][ T3560] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  911.224826][ T3560] usb 4-1: config 0 has no interface number 0
[  911.231054][ T3560] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  911.244464][ T3560] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  911.253858][ T3560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.271330][ T3560] usb 4-1: config 0 descriptor??
[  911.528332][ T3560] usb 4-1: USB disconnect, device number 50
17:58:01 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:01 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840), 0x0, 0x0)

17:58:01 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0xa7205, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f056bbee7, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000380)={0x1c}, 0xffffff5f)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x1e3142, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
write$binfmt_misc(r1, 0x0, 0x4)

17:58:01 executing program 2:
mlock(&(0x7f0000002000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000002000/0x3000)=nil, 0x3000)
msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x5)

17:58:01 executing program 0:
munmap(&(0x7f0000003000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0)

17:58:01 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d81"], 0x0)

[  912.777139][ T3567] usb 2-1: USB disconnect, device number 55
17:58:01 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000880), 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

17:58:02 executing program 2:
r0 = openat$apparmor_task_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg$unix(r2, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup2(r1, r2)
sendfile(r2, r0, 0x0, 0x19)

17:58:02 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe0000011})
r2 = fcntl$dupfd(r1, 0x0, r1)
epoll_wait(r2, &(0x7f0000002840), 0x0, 0x0)

[  913.270492][ T3564] usb 4-1: new high-speed USB device number 51 using dummy_hcd
17:58:02 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}], 0x20}, 0x0)

[  913.502829][ T3567] usb 2-1: new high-speed USB device number 56 using dummy_hcd
17:58:02 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000000), 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x9, 0x688, 0x40, 0x47, 0x1000], 0x4, &(0x7f0000000400)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800d26850fa1281cfee00"/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000001d0008801c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnexthop={0x30, 0x6a, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
madvise(&(0x7f0000356000/0x3000)=nil, 0x3000, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x2d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c81, 0xfffffffffffffffe)

[  913.562527][ T3564] usb 4-1: Using ep0 maxpacket: 8
[  913.713141][ T3564] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  913.721487][ T3564] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  913.732322][ T3564] usb 4-1: config 0 has no interface number 0
[  913.738572][ T3564] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  913.752338][ T3564] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  913.761557][ T3564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.946080][ T3564] usb 4-1: config 0 descriptor??
[  913.962762][ T3567] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  913.973819][ T3567] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  913.987511][ T3567] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  913.996797][ T3567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:58:03 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}], 0x20}, 0x0)

[  914.114110][T16000] deleting an unspecified loop device is not supported.
[  914.224451][ T3567] usb 2-1: config 0 descriptor??
[  914.238297][ T3560] usb 4-1: USB disconnect, device number 51
[  914.279743][ T3567] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
17:58:05 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  916.139274][ T3567] usb 2-1: USB disconnect, device number 56
17:58:05 executing program 4:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = timerfd_create(0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x39000, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

17:58:05 executing program 2:
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
fcntl$setownex(r2, 0xf, 0x0)
r3 = socket(0x11, 0x2, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0xffef}, {0x7, 0xd}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6d}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000800)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

17:58:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}], 0x20}, 0x0)

17:58:05 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d"], 0x0)

17:58:05 executing program 5:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x3)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

17:58:05 executing program 5:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000000)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
rename(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
rmdir(&(0x7f00000000c0)='./file0/file1\x00')
chroot(&(0x7f0000000040)='./file0/file0\x00')

[  916.285266][T16013] netem: change failed
[  916.302743][T16013] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
17:58:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_team\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14)
sendmsg$inet6(r0, &(0x7f0000001200)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@pktinfo={{0x20, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}], 0x20}, 0x0)

17:58:05 executing program 2:
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
fcntl$setownex(r2, 0xf, 0x0)
r3 = socket(0x11, 0x2, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0xffef}, {0x7, 0xd}, {0xc, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x3f, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6d}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000800)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

[  916.592522][T15241] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  916.822152][ T3564] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  916.840872][T16028] netem: change failed
[  916.854241][T15241] usb 4-1: Using ep0 maxpacket: 8
17:58:05 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@remote, 0x0, 0x2}, 0x20)

[  916.940885][T16028] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  917.002551][T15241] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  917.010948][T15241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.021611][T15241] usb 4-1: config 0 has no interface number 0
[  917.027990][T15241] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  917.041462][T15241] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  917.053231][T15241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:58:06 executing program 4:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000000)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
rename(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
rmdir(&(0x7f00000000c0)='./file0/file1\x00')

17:58:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))

[  917.224853][T15241] usb 4-1: config 0 descriptor??
[  917.236902][ T3564] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.247474][ T3564] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  917.262918][ T3564] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  917.272625][ T3564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.418460][ T3564] usb 2-1: config 0 descriptor??
[  917.479470][ T3564] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  917.607965][T15241] usb 4-1: USB disconnect, device number 52
17:58:08 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:08 executing program 0:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000000)='./file0/file1\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
rename(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00')
ftruncate(r0, 0x0)

17:58:08 executing program 5:
pipe2(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000), 0xc)

17:58:08 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8)

17:58:08 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d"], 0x0)

17:58:08 executing program 4:
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)

[  919.447830][T15241] usb 2-1: USB disconnect, device number 57
17:58:08 executing program 5:
semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0])

17:58:08 executing program 2:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

17:58:08 executing program 4:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
writev(r0, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)

[  919.922433][ T3560] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  920.052497][T15241] usb 2-1: new high-speed USB device number 58 using dummy_hcd
17:58:09 executing program 5:
r0 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe801, 0x0)

[  920.162470][ T3560] usb 4-1: Using ep0 maxpacket: 8
17:58:09 executing program 4:
setuid(0xffffffffffffffff)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)

[  920.282574][ T3560] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  920.290828][ T3560] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  920.301467][ T3560] usb 4-1: config 0 has no interface number 0
[  920.307822][ T3560] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  920.321251][ T3560] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
17:58:09 executing program 2:
r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/229)

[  920.333532][ T3560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.458975][T15241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  920.469319][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  920.482528][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  920.491726][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.517148][ T3560] usb 4-1: config 0 descriptor??
[  920.708542][T15241] usb 2-1: config 0 descriptor??
[  920.759941][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  920.776075][ T3560] usb 4-1: USB disconnect, device number 53
17:58:11 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:11 executing program 5:
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))

17:58:11 executing program 4:
pipe2(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x3}, 0xc)

17:58:11 executing program 2:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
getpeername$inet(r0, 0x0, 0x0)

17:58:11 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001000000000904410017ff5d"], 0x0)

17:58:11 executing program 0:
open$dir(&(0x7f0000001140)='./file0\x00', 0x200, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[  922.714003][ T3560] usb 2-1: USB disconnect, device number 58
17:58:11 executing program 4:
mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0)

17:58:11 executing program 2:
mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000)

17:58:11 executing program 5:
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)

17:58:11 executing program 0:
socket$inet6(0x18, 0x3, 0x6)

[  923.162329][    T7] usb 4-1: new high-speed USB device number 54 using dummy_hcd
17:58:12 executing program 4:
unlinkat(0xffffffffffffffff, &(0x7f0000000680)='./file1\x00', 0x0)

[  923.382263][ T3560] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  923.402652][    T7] usb 4-1: Using ep0 maxpacket: 8
17:58:12 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/172, 0xac}, 0x0)
shutdown(r1, 0x1)

[  923.523077][    T7] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  923.531705][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.542562][    T7] usb 4-1: config 0 has no interface number 0
[  923.548884][    T7] usb 4-1: config 0 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  923.562458][    T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  923.572588][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.670929][    T7] usb 4-1: config 0 descriptor??
[  923.763686][ T3560] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  923.774290][ T3560] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  923.787671][ T3560] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  923.797026][ T3560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.843911][ T3560] usb 2-1: config 0 descriptor??
[  923.895900][ T3560] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  923.952915][    T7] usb 4-1: USB disconnect, device number 54
17:58:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:14 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x1006, &(0x7f00000000c0), 0x0)

17:58:14 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x1002, 0x0, 0x0)

17:58:14 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x1001, &(0x7f00000000c0)="7a4b69bb", 0x4)

17:58:14 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
shutdown(r0, 0x2)
setsockopt(r0, 0xffff, 0x100, &(0x7f00000000c0)="7a4b69bb", 0x4)

17:58:14 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/172, 0xac}, 0x0)
shutdown(r1, 0x1)

[  926.005217][T15241] usb 2-1: USB disconnect, device number 59
17:58:15 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x0)
fcntl$setstatus(r0, 0x4, 0x40)
shutdown(r0, 0x0)

17:58:15 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000080)=""/56, 0x43}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000001b80)=""/230, 0xe6}, {&(0x7f0000000280)=""/165, 0xfffffffffffffde3}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f00000001c0)=""/147, 0xa0}, {&(0x7f0000000440)=""/155, 0x9b}], 0x8, &(0x7f0000000580)=""/7, 0x7}, 0x0)

17:58:15 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x1003, 0x0, 0x0)

[  926.852192][T15882] usb 2-1: new high-speed USB device number 60 using dummy_hcd
17:58:15 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f00000000c0)="eaff115c00000000", 0x8)
setsockopt$inet_opts(r0, 0x0, 0x200000000000d, &(0x7f0000000040)="eaff115c00000000", 0x8)

17:58:15 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x8, &(0x7f00000000c0)="7a4b69bb", 0x4)

17:58:15 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x4, 0x0, 0x0)

[  927.213309][T15882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.223866][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  927.237234][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  927.246575][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.373977][T15882] usb 2-1: config 0 descriptor??
[  927.440200][T15882] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
17:58:18 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:18 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt(r0, 0xffff, 0x1002, &(0x7f00000000c0), 0x0)

17:58:18 executing program 0:
r0 = fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000080), 0x0)

17:58:18 executing program 4:
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0)

17:58:18 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4)

17:58:18 executing program 2:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000340), 0x4)

[  929.498528][    T7] usb 2-1: USB disconnect, device number 60
17:58:18 executing program 2:
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004080)={{0x3, 0x0, 0x0, 0x0, 0xee00}})
msgsnd(0xffffffffffffffff, &(0x7f0000001000)={0x2, "39a9043ebea56ef5a0d63a6f4d646fa2c4c6bf22f814659dc4fd18aac398a3dd1219dc56865506c377735d"}, 0x33, 0x800)
msgget(0x1, 0x20a)

17:58:18 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

17:58:18 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100))

17:58:18 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]})

17:58:19 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000700)='net\x00')

[  930.192016][T15241] usb 2-1: new high-speed USB device number 61 using dummy_hcd
17:58:19 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f000001b300)='ns/mnt\x00')

[  930.614402][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  930.628011][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  930.637384][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.658303][T15241] usb 2-1: config 0 descriptor??
[  930.710146][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
17:58:21 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:21 executing program 3:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0)

17:58:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000034a80))

17:58:21 executing program 4:
r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0)

17:58:21 executing program 5:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff)

17:58:21 executing program 2:
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

[  932.858816][    T7] usb 2-1: USB disconnect, device number 61
17:58:22 executing program 3:
move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f00000000c0), 0x0)

17:58:22 executing program 0:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x140d, 0x1001, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

17:58:22 executing program 4:
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12012000f1a98108cd060202da920000000109021b0001000000d40904000001da40df0009058202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

17:58:22 executing program 5:
syz_mount_image$udf(0x0, 0x0, 0x0, 0x3, &(0x7f0000001380)=[{&(0x7f0000000fc0)="aa47", 0x2, 0xfff}, {&(0x7f0000001180)="01", 0x1}, {&(0x7f00000011c0)='Z', 0x1}], 0x0, 0x0)

17:58:22 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000087c0)='ns/ipc\x00')

[  933.423043][T15241] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  933.442414][T16188] loop5: detected capacity change from 0 to 15
17:58:22 executing program 0:
move_pages(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)

[  933.662418][    T7] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  933.792785][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  933.806445][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  933.815933][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.843675][T15241] usb 2-1: config 0 descriptor??
[  933.912497][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  934.023004][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  934.033906][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  934.044067][    T7] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.da
[  934.053458][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.112904][    T7] usb 5-1: config 0 descriptor??
[  934.606974][    T7] usb 5-1: USB disconnect, device number 8
17:58:25 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:25 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0x1200, &(0x7f0000001a80)="b9ff0300600d698cb89e14f088a8", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)

17:58:25 executing program 3:
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11)

17:58:25 executing program 5:
syz_io_uring_setup(0x6af7, &(0x7f0000000b00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

17:58:25 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), 0x4)

17:58:25 executing program 0:
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x20400)

[  936.094998][T15241] usb 2-1: USB disconnect, device number 62
17:58:25 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

17:58:25 executing program 0:
syz_io_uring_setup(0x37cd, &(0x7f00000017c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001840), 0x0)
syz_io_uring_setup(0x26d6, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

17:58:25 executing program 2:
getgid()
getegid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0)
r0 = msgget(0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgroups(0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000002040)={{0x0, 0x0, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff17, 0x0, 0xffffffffffffffff})
getresgid(0x0, 0x0, 0x0)

17:58:25 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000100))

[  936.642149][T15241] usb 2-1: new high-speed USB device number 63 using dummy_hcd
17:58:25 executing program 3:
process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000000840)=[{&(0x7f0000000580)=""/231, 0xe7}, {0x0}], 0x2, 0x0)

17:58:25 executing program 0:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)

[  937.053885][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  937.067253][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  937.076700][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.245465][T15241] usb 2-1: config 0 descriptor??
[  937.333816][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
17:58:28 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000000004026093333000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:28 executing program 2:
getgid()
getegid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0)
r0 = msgget(0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgroups(0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000002040)={{0x0, 0x0, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff17, 0x0, 0xffffffffffffffff})
getresgid(0x0, 0x0, 0x0)

17:58:28 executing program 5:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000e00000/0x3000)=nil)

17:58:28 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))

17:58:28 executing program 0:
shmget(0x3, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil)

17:58:28 executing program 3:
munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

[  939.342701][T15241] usb 2-1: USB disconnect, device number 63
17:58:28 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @random="47628aba894a"}, 0x10)

17:58:28 executing program 0:
r0 = socket(0x2, 0x3, 0xff)
connect$inet(r0, &(0x7f00000002c0), 0x10)
r1 = dup(r0)
bind$inet(r1, 0x0, 0x0)

17:58:28 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x80, 0x0)

17:58:28 executing program 3:
setpriority(0x2, 0x0, 0x51cbec71)

17:58:28 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000000)={'bond0\x00', @ifru_map})

[  939.808669][T16234] device batadv_slave_1 entered promiscuous mode
[  939.838047][T16234] device batadv_slave_0 entered promiscuous mode
[  939.870741][T16233] device batadv_slave_0 left promiscuous mode
[  939.878007][T16233] device batadv_slave_1 left promiscuous mode
[  939.934053][T15241] usb 2-1: new high-speed USB device number 64 using dummy_hcd
17:58:28 executing program 0:
syz_emit_ethernet(0xda, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0489f1", 0xa4, 0x11, 0x0, @dev, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0x7}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "48a0218b5e18924d1daa9268e74fedd2c8a2a913d275e7564902d3f13a287ef9", "385d6bbffbfaf9543ba160c69403a425487d352c9ee7997a77002ae9c6e47b6d442f2f756a91993e9542e889e7cf7118", "add317350284d1cc5d8d00d6ce891743b9653014e80fb7f826a1bf30", {"97d800c897ed082d4aa3408bd03e6c77", "ca5e0ff0a96b6eefdd65b199f135c5e3"}}}}}}}}, 0x0)

[  940.333279][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  940.343426][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  940.357147][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  940.366443][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.451676][T15241] usb 2-1: config 0 descriptor??
[  940.502642][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
17:58:31 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000000004026093333000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:31 executing program 3:
migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000180)=0x9)

17:58:31 executing program 2:
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0xfffffffffffffffe, r0)

17:58:31 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00')

17:58:31 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000001480)={{0x77359400}, {0x0, r0+60000000}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180))

17:58:31 executing program 0:
socket(0x26, 0x5, 0x1)

[  942.602058][T15241] usb 2-1: USB disconnect, device number 64
17:58:31 executing program 4:
timer_create(0x2, 0x0, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000001480)={{0x77359400}, {0x0, r0+60000000}}, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {r1}}, 0x0)

17:58:31 executing program 2:
mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30132, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x2, 0x9, 0x0, 0x0, 0x21408, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x1080, 0x4, 0x0, 0x2, 0x4, 0x8000, 0x8, 0x0, 0x3, 0x0, 0x81}, r0, 0xc, 0xffffffffffffffff, 0x2)
lgetxattr(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000005c0)=""/114, 0x72)
truncate(0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2f646576040000cc01d1b6ffb87a2a115aae0a7a7877570000"], &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, &(0x7f0000000980)='smackfsdef')
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x2, &(0x7f0000000700)=[{0x0, 0x0, 0x40}, {&(0x7f00000006c0)}], 0x0, 0x0)
creat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
unlink(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')

17:58:31 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
dup2(r0, r2)

17:58:31 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
wait4(0x0, 0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
rmdir(0x0)

17:58:31 executing program 3:
setpriority(0x0, 0x0, 0x51cbec71)

17:58:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)

[  943.253201][T15241] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  943.643204][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  943.653397][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  943.666534][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  943.677863][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.763204][T15241] usb 2-1: config 0 descriptor??
[  943.809674][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  945.069940][ T1199] ieee802154 phy1 wpan1: encryption failed: -22
17:58:34 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000000004026093333000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:34 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\xdb\xd1\x98\xbdB\x9fL3\xa5z#\v\xe6\xb3\xa7NW\xde@\xb32Mt{hI\x8f\x98\x1e?(\xa8(\xd9_H3PO\\\xd4\xca\xdd\rGi\xb6v\xfe\xd8\x9d \x11\x03w>j1(\xe3Z\x84\xd1?\xbb5\xb9\xcf\xa3n\xcfL\xe9\xfc{\xcf\xca\xbb/d~\xaa\x9eAk\x17\x95xR\x92\xde\xc1\x1b\xd2?B\xc2E> k$~\x93\x04O\b%_\xb6\\\xec\x96\x80s\xe4\b\x88M\xcb\x18\x8a\xb2+dL\xcaV\x93\xf8\x05\xbe\xd8\xae\x0f\xd7\x8c\xd3M', 0x5)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0)
ftruncate(r0, 0x0)

17:58:34 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
ftruncate(r1, 0x40001)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000000002)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400203, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x45, 0x2}, 0x18)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

17:58:34 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

17:58:34 executing program 4:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000440)="200000004000000003000000aa0000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000004000001000000000000000b000000000200002802000002843d6c1b56", 0x66, 0x400}], 0x0, &(0x7f00000005c0)=ANY=[])
chdir(0x0)

17:58:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
dup2(r0, r2)

[  945.925702][T15241] usb 2-1: USB disconnect, device number 65
[  946.088228][T16287] loop4: detected capacity change from 0 to 4
17:58:35 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  946.262974][   T24] audit: type=1804 audit(1640541515.070:176): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir056449002/syzkaller.IzaDJe/794/file0" dev="sda1" ino=1225 res=1 errno=0
17:58:35 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  946.381048][T16287] EXT4-fs warning (device loop4): ext4_fill_super:3968: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  946.394603][T16287] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
17:58:35 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
ftruncate(r1, 0x40001)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000000002)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400203, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x45, 0x2}, 0x18)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

17:58:35 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
ftruncate(r1, 0x40001)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000000002)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400203, 0x0)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x45, 0x2}, 0x18)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  946.723003][T15241] usb 2-1: new high-speed USB device number 66 using dummy_hcd
17:58:35 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
dup2(r0, r2)

[  947.108855][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  947.119011][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  947.132439][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  947.141637][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.151058][   T24] audit: type=1804 audit(1640541516.040:177): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir056449002/syzkaller.IzaDJe/795/file0" dev="sda1" ino=1211 res=1 errno=0
[  947.351478][T15241] usb 2-1: config 0 descriptor??
[  947.408714][T15241] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
17:58:38 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:38 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

17:58:38 executing program 5:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

17:58:38 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:38 executing program 4:
r0 = syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6664f2", @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000005,allow_other,smackfsroot=#)}$,appraise_type=imasig,\x00'])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f00005a1ffb)='eth0\xd2', 0x42, 0x38, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(0xffffffffffffffff, &(0x7f0000000880))
writev(r2, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000340)}, {0x0}], 0x4)
mq_notify(r1, 0x0)
syz_io_uring_setup(0x2171, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[])
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x15, 0x0)
unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200)
timer_settime(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200))

[  949.256766][T15882] usb 2-1: USB disconnect, device number 66
17:58:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
dup2(r0, r2)

17:58:38 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  949.977293][   T24] audit: type=1804 audit(1640541518.890:178): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir953338103/syzkaller.LTHNnt/855/file0" dev="sda1" ino=1230 res=1 errno=0
[  950.273905][T16329] loop4: detected capacity change from 0 to 1019
17:58:39 executing program 2:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  950.352066][T15241] usb 2-1: new high-speed USB device number 67 using dummy_hcd
17:58:39 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

17:58:39 executing program 5:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  950.785085][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.796250][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.807781][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  950.822169][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  950.822422][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:58:39 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  950.903227][T16329] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  950.915000][T15241] usb 2-1: config 0 descriptor??
17:58:40 executing program 4:
r0 = syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6664f2", @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000005,allow_other,smackfsroot=#)}$,appraise_type=imasig,\x00'])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x42080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f00005a1ffb)='eth0\xd2', 0x42, 0x38, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(0xffffffffffffffff, &(0x7f0000000880))
writev(r2, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000340)}, {0x0}], 0x4)
mq_notify(r1, 0x0)
syz_io_uring_setup(0x2171, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[])
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x15, 0x0)
unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200)
timer_settime(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200))

[  951.330504][   T24] audit: type=1804 audit(1640541520.270:179): pid=16352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir953338103/syzkaller.LTHNnt/856/file0" dev="sda1" ino=1223 res=1 errno=0
[  951.450108][   T24] audit: type=1804 audit(1640541520.350:180): pid=16348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir056449002/syzkaller.IzaDJe/797/file0" dev="sda1" ino=1218 res=1 errno=0
[  951.503423][T15241] usbhid 2-1:0.0: can't add hid device: -71
[  951.509678][T15241] usbhid: probe of 2-1:0.0 failed with error -71
[  951.625349][T15241] usb 2-1: USB disconnect, device number 67
[  951.900605][T16363] loop4: detected capacity change from 0 to 1019
17:58:41 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:41 executing program 0:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create(0x40000)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x30000002})

17:58:41 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:41 executing program 2:
syz_genetlink_get_family_id$nl80211(&(0x7f0000009240), 0xffffffffffffffff)

17:58:41 executing program 5:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39ddd7)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCDELRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, @sco, 0xd7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x3, 0x7f})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x8, 0x2)
setgid(r2)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40043, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0xea82, 0x0)
copy_file_range(r3, 0x0, r4, 0x0, 0x9, 0x0)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x105180, 0xe5)
open(&(0x7f0000000040)='./bus\x00', 0x64ce02, 0x20)
fcntl$getown(r1, 0x9)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
epoll_create1(0x0)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
close(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  952.276272][T16363] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
17:58:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0)

17:58:41 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

[  952.691744][   T24] audit: type=1804 audit(1640541521.600:181): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir953338103/syzkaller.LTHNnt/857/file0" dev="sda1" ino=1239 res=1 errno=0
17:58:41 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10}], 0x10}, 0x0)

[  952.802278][T15882] usb 2-1: new high-speed USB device number 68 using dummy_hcd
17:58:41 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)

17:58:41 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000000))

[  953.172955][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  953.184384][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  953.197737][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  953.211235][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  953.220638][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:58:42 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  953.316194][T15882] usb 2-1: config 0 descriptor??
[  953.852940][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  953.859149][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  953.870141][T15882] usb 2-1: USB disconnect, device number 68
17:58:43 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:43 executing program 2:
openat$tun(0xffffffffffffff9c, 0x0, 0x410400, 0x0)

17:58:43 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005dc0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:58:43 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:43 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x3, &(0x7f0000001240)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:58:43 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:43 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000016c0)={'ip6gre0\x00', &(0x7f0000001640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}})

17:58:43 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000640)=0x20, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="e00000010000000000000000040000007f000001ac1e0001e0000001e00000028bf479e964944229e5647f4dd4ab3d05ba"], 0x20)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000003c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmsg(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/213, 0xd5}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000500)=""/214, 0xd6}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000600)={0x0, 0x9}, 0x8)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x0)

17:58:43 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:43 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002740), 0x4)

17:58:43 executing program 2:
socketpair(0x28, 0x80000, 0x0, &(0x7f000000fb40))

[  954.914902][T15882] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  955.283348][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  955.294722][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  955.304820][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  955.317947][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  955.327279][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.362570][T15882] usb 2-1: config 0 descriptor??
[  955.902382][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  955.908588][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  955.924850][T15882] usb 2-1: USB disconnect, device number 69
17:58:45 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:45 executing program 3:
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:45 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:45 executing program 0:
pipe(&(0x7f00000001c0))
write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000)
pipe(&(0x7f00000002c0))
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x29, 0x829, 0x0, 0x1067, {0x4, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

17:58:45 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005dc0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:58:45 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
getsockname$unix(r0, 0x0, 0x0)

17:58:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0)

17:58:45 executing program 3:
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000003980), 0x4)

17:58:45 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f000000fb40))

17:58:45 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507ffffffffffff001100000100", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000024000b1d000800800000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000003000d0001006671"], 0x50}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  956.922707][T15241] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  957.246115][T16440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  957.312782][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.324435][T15241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  957.334909][T15241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  957.347996][T15241] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  957.357338][T15241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.374324][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  957.440799][T15241] usb 2-1: config 0 descriptor??
[  957.972339][T15241] usbhid 2-1:0.0: can't add hid device: -71
[  957.978539][T15241] usbhid: probe of 2-1:0.0 failed with error -71
[  957.989620][T15241] usb 2-1: USB disconnect, device number 70
17:58:47 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:47 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005dc0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:58:47 executing program 3:
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:47 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c)
connect$inet6(r3, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x3, &(0x7f0000002280)=""/4101, &(0x7f0000000040)=0x1005)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r4, r2, 0x0, 0x100000002)

17:58:47 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:47 executing program 0:
socketpair(0x18, 0x0, 0x0, &(0x7f0000004980))

17:58:47 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:47 executing program 4:
socket$unix(0x1, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

17:58:47 executing program 3:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  958.680252][   T24] audit: type=1804 audit(1640541527.620:182): pid=16452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir056449002/syzkaller.IzaDJe/805/cgroup.controllers" dev="sda1" ino=1233 res=1 errno=0
17:58:47 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc)

17:58:47 executing program 3:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:48 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)='d', 0x1}, {&(0x7f00000001c0)="0e", 0x1}], 0x2}, 0x0)

[  959.052503][T15882] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  959.422739][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  959.433891][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  959.443965][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  959.457043][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  959.466304][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.527646][T15882] usb 2-1: config 0 descriptor??
[  960.082500][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  960.088760][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  960.101713][T15882] usb 2-1: USB disconnect, device number 71
17:58:49 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="010029"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:49 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:49 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000005c0)={@isdn, {0x0}, 0x0}, 0xa0)

17:58:49 executing program 3:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:49 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)

17:58:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)

17:58:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000005a00)={0x0, 0x0, &(0x7f00000059c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0)

17:58:49 executing program 5:
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:49 executing program 4:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00')
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)

17:58:49 executing program 2:
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x20}, 0x14}}, 0x0)

17:58:49 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  961.142390][    T7] usb 2-1: new high-speed USB device number 72 using dummy_hcd
17:58:50 executing program 5:
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  961.515938][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  961.527158][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.537249][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  961.550384][    T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  961.559720][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.585593][    T7] usb 2-1: config 0 descriptor??
[  962.132258][    T7] usbhid 2-1:0.0: can't add hid device: -71
[  962.138651][    T7] usbhid: probe of 2-1:0.0 failed with error -71
[  962.154754][    T7] usb 2-1: USB disconnect, device number 72
17:58:51 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

17:58:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040))

17:58:51 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:51 executing program 4:
add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f0", 0x1, 0xffffffffffffffff)

17:58:51 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)

17:58:51 executing program 5:
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:51 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000002640)={{0x12, 0x1, 0x0, 0x9d, 0xb5, 0x74, 0x40, 0x1ae7, 0x9004, 0x9dcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa6, 0x34, 0x10, 0x0, [], [{}]}}]}}]}}, 0x0)

17:58:51 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:51 executing program 5:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:51 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fa1d824096050100b8300800000109021b0001000000000904000001b5e22e00090581"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x0, 0x0, 0x10, "e445c4b1c113fb78c66e47397db67fdf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

17:58:51 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000dc0)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000c00)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x0, 0x62, "83b8c239", "0f111b16"}}, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6d9, 0x0, 0x0, 0x7}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}}]}}, 0x0)

[  963.197925][    T7] usb 2-1: new high-speed USB device number 73 using dummy_hcd
17:58:52 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  963.432882][T15241] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  963.446110][ T3567] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  963.452420][T15882] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  963.613231][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  963.624560][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  963.634719][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  963.650925][    T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  963.660884][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.675651][    T7] usb 2-1: config 0 descriptor??
[  963.813035][T15241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  963.823531][ T3567] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  963.832935][ T3567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.846368][T15882] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  963.860510][ T3567] usb 1-1: config 0 descriptor??
[  963.905154][T15241] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=30.b8
[  963.914607][T15241] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0
[  963.923130][T15241] usb 5-1: Manufacturer: syz
[  963.936680][T15241] usb 5-1: config 0 descriptor??
[  964.012984][T15882] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9004, bcdDevice=9d.cd
[  964.022380][T15882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.030523][T15882] usb 3-1: Product: syz
[  964.035084][T15882] usb 3-1: Manufacturer: syz
[  964.039811][T15882] usb 3-1: SerialNumber: syz
[  964.063582][T15882] usb 3-1: config 0 descriptor??
[  964.126420][T16510] UDC core: couldn't find an available UDC or it's busy: -16
[  964.134418][T16510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  964.202707][ T3567] udlfb 1-1:0.0: vendor descriptor not available (-71)
[  964.222795][    T7] usbhid 2-1:0.0: can't add hid device: -71
[  964.225986][ T3567] usb 1-1: Read EDID byte 0 failed: -71
[  964.229158][    T7] usbhid: probe of 2-1:0.0 failed with error -71
[  964.248777][    T7] usb 2-1: USB disconnect, device number 73
[  964.259137][ T3567] usb 1-1: Read EDID byte 0 failed: -71
[  964.289012][ T3567] usb 1-1: Read EDID byte 0 failed: -71
[  964.295336][ T3567] usb 1-1: Unable to get valid EDID from device/display
[  964.322381][T15882] usb 3-1: USB disconnect, device number 11
[  964.343388][ T3567] usb 1-1: submit urb error: -2
[  964.368590][ T3567] udlfb: probe of 1-1:0.0 failed with error -2
[  964.432337][ T3567] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  964.441108][ T3567] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  964.463588][ T3567] [drm:udl_init] *ERROR* Selecting channel failed
[  964.482487][ T3567] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  964.490110][ T3567] [drm] Initialized udl on minor 2
[  964.512548][ T3567] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  964.522145][ T3567] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  964.544644][ T3567] usb 1-1: USB disconnect, device number 10
[  964.633196][T15241] usbtouchscreen: probe of 5-1:0.0 failed with error -71
[  964.674140][T15241] usb 5-1: USB disconnect, device number 9
17:58:53 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

17:58:53 executing program 5:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:53 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:53 executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000dc0)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000c00)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x60, 0x0, 0x62, "83b8c239", "0f111b16"}}, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6d9, 0x0, 0x0, 0x7}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}}]}}, 0x0)

17:58:53 executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000012c0)={0x84, &(0x7f0000000e00)={0x0, 0x16, 0xc9, "e88823a582b87a98602c5b6cc0ac65cb84ebcdf78f9ec27959f62477ce9db6a393515a237e02307eabff601a361516e51063ec0bcd6fa151a5302be9b37068b08c644dfa7b73c340862867d31a78f250d7d117dd030799f0d809ac1a91b2e41ea392f8e5aee36d1712d9bea3a05a3001c3cc4249fbe8afb174ffef892e12a831b8dddc20506e6463c5cd64c8b576993a916b950a5d85a03222c89407800c68b1c5afc13498d881ce880426705993bacf86a5a0d9e40885bb241a881c2a291653bc3fdeb64f374db24a"}, &(0x7f0000000f00)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000001000)={0x40, 0x7, 0x2}, &(0x7f0000001040)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x40, 0x19, 0x2, "7d85"}, 0x0, 0x0, &(0x7f0000001240)={0x40, 0x1e, 0x1, 0x1}, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

17:58:54 executing program 4:
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000002640)={{0x12, 0x1, 0x0, 0x9d, 0xb5, 0x74, 0x40, 0x1ae7, 0x9004, 0x9dcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa6, 0x34, 0x10, 0x0, [], [{}]}}]}}]}}, 0x0)

17:58:54 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  965.382968][T15882] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  965.422981][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
17:58:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  965.699218][T15241] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  965.817798][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  965.829191][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  965.839356][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  965.852721][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  965.862205][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.871786][    T7] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  965.881362][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:58:54 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  965.923093][    T7] usb 1-1: config 0 descriptor??
[  965.954078][T15882] usb 2-1: config 0 descriptor??
[  965.973950][ T3560] usb 5-1: new high-speed USB device number 10 using dummy_hcd
17:58:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  966.062601][T15241] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  966.072279][T15241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.127258][T15241] usb 3-1: config 0 descriptor??
[  966.170002][T16533] UDC core: couldn't find an available UDC or it's busy: -16
[  966.178121][T16533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
17:58:55 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[  966.253780][    T7] udlfb 1-1:0.0: vendor descriptor not available (-71)
[  966.282532][    T7] usb 1-1: Read EDID byte 0 failed: -71
17:58:55 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  966.305829][    T7] usb 1-1: Read EDID byte 0 failed: -71
[  966.333727][    T7] usb 1-1: Read EDID byte 0 failed: -71
[  966.340442][    T7] usb 1-1: Unable to get valid EDID from device/display
[  966.353228][ T3560] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  966.380762][    T7] usb 1-1: submit urb error: -2
[  966.410640][    T7] udlfb: probe of 1-1:0.0 failed with error -2
[  966.442592][T15241] udlfb 3-1:0.0: vendor descriptor not available (-71)
[  966.468723][T15241] usb 3-1: Read EDID byte 0 failed: -71
[  966.513682][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  966.515161][T15241] usb 3-1: Read EDID byte 0 failed: -71
[  966.520116][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  966.535024][    T7] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  966.544082][    T7] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  966.570112][T15882] usb 2-1: USB disconnect, device number 74
[  966.571127][T15241] usb 3-1: Read EDID byte 0 failed: -71
[  966.582210][T15241] usb 3-1: Unable to get valid EDID from device/display
[  966.592843][    T7] [drm:udl_init] *ERROR* Selecting channel failed
[  966.605018][ T3560] usb 5-1: New USB device found, idVendor=1ae7, idProduct=9004, bcdDevice=9d.cd
[  966.617421][ T3560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.626201][ T3560] usb 5-1: Product: syz
[  966.630485][ T3560] usb 5-1: Manufacturer: syz
[  966.635346][ T3560] usb 5-1: SerialNumber: syz
[  966.667583][    T7] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  966.675556][    T7] [drm] Initialized udl on minor 2
[  966.693122][ T3560] usb 5-1: config 0 descriptor??
[  966.706503][T15241] usb 3-1: submit urb error: -2
[  966.724661][    T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  966.734874][    T7] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  966.780225][T15241] udlfb: probe of 3-1:0.0 failed with error -2
[  966.865898][    T7] usb 1-1: USB disconnect, device number 11
[  966.895511][T15241] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  966.904801][T15241] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  966.959233][T15882] usb 5-1: USB disconnect, device number 10
[  966.983085][T15241] [drm:udl_init] *ERROR* Selecting channel failed
17:58:56 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

17:58:56 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00')

17:58:56 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000013a00))

17:58:56 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:56 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r2 = dup2(r0, r1)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x901, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='-E,'], 0x8)

[  967.068961][T15241] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 3
[  967.076885][T15241] [drm] Initialized udl on minor 3
[  967.207180][T15241] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  967.217231][T15241] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  967.297259][T16560] loop0: detected capacity change from 0 to 512
[  967.327912][T15241] usb 3-1: USB disconnect, device number 12
[  967.383422][T16560] EXT4-fs error (device loop0): ext4_fill_super:4822: inode #2: comm syz-executor.0: iget: root inode unallocated
[  967.404132][T16560] EXT4-fs (loop0): get root inode failed
[  967.410250][T16560] EXT4-fs (loop0): mount failed
17:58:56 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140), &(0x7f00000000c0)=0x44)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$FITHAW(r1, 0xc0045878)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000440)=""/181, &(0x7f0000000300)=0xb5)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0xa00}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x0, 0x7530}, 0x700)

17:58:56 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(0x0, &(0x7f0000000140)='./file1\x00')

17:58:56 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:56 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8001}, 0x14)

[  967.712308][T15882] usb 2-1: new high-speed USB device number 75 using dummy_hcd
17:58:56 executing program 2:
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0)
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

17:58:57 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(0x0, &(0x7f0000000140)='./file1\x00')

[  968.092747][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  968.104076][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  968.114380][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  968.127582][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  968.136947][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
17:58:57 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  968.359007][T15882] usb 2-1: config 0 descriptor??
[  968.922347][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  968.928489][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  968.939873][T15882] usb 2-1: USB disconnect, device number 75
17:58:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

17:58:58 executing program 4:
r0 = fork()
capget(&(0x7f0000002040)={0x20071026, r0}, &(0x7f0000002080))

17:58:58 executing program 0:
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:58:58 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(0x0, &(0x7f0000000140)='./file1\x00')

17:58:58 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x2, 0x20, 0x100000}, 0x2f)

17:58:58 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:58 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x0, 0x0, 0x0, 0x3}, 0x48)

17:58:58 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:58:58 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x43400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
close(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025)

[  969.590706][T16593] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure
[  969.603067][T16595] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
17:58:58 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', 0x0)

17:58:58 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)={'ip6_vti0'}, 0xb)

17:58:58 executing program 0:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7f, 0x81, 0x3, 0x24, 0x0, 0x40, 0x407a, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2c0000000000000, 0x9}, 0x8004, 0x9, 0x7, 0x8, 0x8, 0xffffffff, 0x8, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xf, r0, 0x2)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  970.082957][T15882] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  970.522770][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  970.534481][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  970.544495][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  970.557549][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  970.563382][T16612] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[  970.566865][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.751120][T15882] usb 2-1: config 0 descriptor??
[  971.302421][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  971.308672][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  971.334750][T15882] usb 2-1: USB disconnect, device number 76
17:59:00 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

17:59:00 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:59:00 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', 0x0)

17:59:00 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f0000014cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:59:00 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:59:00 executing program 0:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7f, 0x81, 0x3, 0x24, 0x0, 0x40, 0x407a, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2c0000000000000, 0x9}, 0x8004, 0x9, 0x7, 0x8, 0x8, 0xffffffff, 0x8, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xf, r0, 0x2)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:59:00 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000000)='./file0\x00', 0x0)

17:59:00 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000511d25a80648c63940d0124fc600910064006000200020000170000001f0a0001800a000000d1bd", 0x33fe0}], 0x1}, 0x0)

[  971.996166][T16634] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
17:59:01 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xbd65, 0x2, 0x0, 0x1}, 0x48)

17:59:01 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  972.393217][T15882] usb 2-1: new high-speed USB device number 77 using dummy_hcd
17:59:01 executing program 0:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7f, 0x81, 0x3, 0x24, 0x0, 0x40, 0x407a, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2c0000000000000, 0x9}, 0x8004, 0x9, 0x7, 0x8, 0x8, 0xffffffff, 0x8, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xf, r0, 0x2)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:59:01 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg(r0, &(0x7f0000007900)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000009940)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)="b0", 0x1}], 0x1, &(0x7f0000001480)=ANY=[], 0x120}, 0x880)

[  972.792602][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  972.804036][T15882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  972.814163][T15882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  972.827219][T15882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  972.836594][T15882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.961149][T15882] usb 2-1: config 0 descriptor??
[  973.042136][T16656] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[  973.502385][T15882] usbhid 2-1:0.0: can't add hid device: -71
[  973.508726][T15882] usbhid: probe of 2-1:0.0 failed with error -71
[  973.528507][T15882] usb 2-1: USB disconnect, device number 77
17:59:02 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

17:59:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x0, 0x0, 0x1f, 0x0, 0x1}, 0x48)

17:59:02 executing program 2:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040))

17:59:02 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

17:59:02 executing program 0:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
socket$kcm(0x2, 0x0, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5890, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x7f, 0x81, 0x3, 0x24, 0x0, 0x40, 0x407a, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2c0000000000000, 0x9}, 0x8004, 0x9, 0x7, 0x8, 0x8, 0xffffffff, 0x8, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xf, r0, 0x2)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x402862, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:59:02 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x202000000000000, &(0x7f0000000000)=@base={0xa, 0x47f, 0x4803, 0x65, 0x0, 0x1}, 0x48)

17:59:03 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0xcb, &(0x7f00000002c0)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

17:59:03 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  974.298818][T16675] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[  974.692197][    T7] usb 2-1: new high-speed USB device number 78 using dummy_hcd
17:59:03 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28000000000000000100000001"], 0x70}, 0x0)

17:59:03 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="d25b03b70803000e009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

17:59:03 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x202000000000000, &(0x7f0000000000)=@base={0xa, 0x47f, 0x4803, 0x65, 0x0, 0x1}, 0x48)

17:59:03 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10)

[  975.115041][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.126617][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.137798][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  975.150944][    T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  975.160290][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.321053][T16691] =====================================================
[  975.328180][T16691] BUG: KMSAN: uninit-value in br_dev_xmit+0x8eb/0x1f60
[  975.335045][    T7] usb 2-1: config 0 descriptor??
[  975.340150][T16691]  br_dev_xmit+0x8eb/0x1f60
[  975.344717][T16691]  xmit_one+0x2f4/0x840
[  975.348931][T16691]  dev_hard_start_xmit+0x186/0x440
[  975.354098][T16691]  __dev_queue_xmit+0x2104/0x3290
[  975.359192][T16691]  dev_queue_xmit+0x4b/0x60
[  975.363752][T16691]  __bpf_redirect+0x15f0/0x1840
[  975.368736][T16691]  bpf_clone_redirect+0x4a5/0x660
[  975.373819][T16691]  ___bpf_prog_run+0x92d/0xb420
[  975.378801][T16691]  __bpf_prog_run512+0x121/0x180
[  975.383797][T16691]  bpf_test_run+0x762/0x1040
[  975.388484][T16691]  bpf_prog_test_run_skb+0x15c9/0x2100
[  975.393985][T16691]  bpf_prog_test_run+0x784/0x820
[  975.398956][T16691]  __sys_bpf+0xada/0x1230
[  975.403314][T16691]  __ia32_sys_bpf+0xe1/0x130
[  975.407935][T16691]  __do_fast_syscall_32+0x96/0xf0
[  975.413000][T16691]  do_fast_syscall_32+0x34/0x70
[  975.417886][T16691]  do_SYSENTER_32+0x1b/0x20
[  975.422430][T16691]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  975.428804][T16691] 
[  975.431128][T16691] Uninit was created at:
[  975.435427][T16691]  __kmalloc_node_track_caller+0xe0c/0x1510
[  975.441458][T16691]  pskb_expand_head+0x26a/0x1ca0
[  975.446433][T16691]  skb_ensure_writable+0x501/0x5b0
[  975.451587][T16691]  bpf_clone_redirect+0x25d/0x660
[  975.456654][T16691]  ___bpf_prog_run+0x92d/0xb420
[  975.461546][T16691]  __bpf_prog_run512+0x121/0x180
[  975.466528][T16691]  bpf_test_run+0x762/0x1040
[  975.471150][T16691]  bpf_prog_test_run_skb+0x15c9/0x2100
[  975.476655][T16691]  bpf_prog_test_run+0x784/0x820
[  975.481626][T16691]  __sys_bpf+0xada/0x1230
[  975.485987][T16691]  __ia32_sys_bpf+0xe1/0x130
[  975.490608][T16691]  __do_fast_syscall_32+0x96/0xf0
[  975.495699][T16691]  do_fast_syscall_32+0x34/0x70
[  975.500584][T16691]  do_SYSENTER_32+0x1b/0x20
[  975.505123][T16691]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  975.511497][T16691] 
[  975.513820][T16691] CPU: 1 PID: 16691 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0
[  975.522609][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  975.532680][T16691] =====================================================
[  975.539610][T16691] Disabling lock debugging due to kernel taint
[  975.546146][T16691] Kernel panic - not syncing: kmsan.panic set ...
[  975.552570][T16691] CPU: 1 PID: 16691 Comm: syz-executor.4 Tainted: G    B             5.16.0-rc5-syzkaller #0
[  975.562758][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  975.572839][T16691] Call Trace:
[  975.576133][T16691]  <TASK>
[  975.579084][T16691]  dump_stack_lvl+0x1ff/0x28e
[  975.583842][T16691]  dump_stack+0x25/0x28
[  975.588046][T16691]  panic+0x487/0xe1f
[  975.591993][T16691]  ? add_taint+0x181/0x210
[  975.596464][T16691]  ? _raw_spin_unlock_irqrestore+0x78/0xb0
[  975.602416][T16691]  kmsan_report+0x2e6/0x2f0
[  975.606977][T16691]  ? __msan_warning+0xb8/0x130
[  975.611785][T16691]  ? br_dev_xmit+0x8eb/0x1f60
[  975.616517][T16691]  ? xmit_one+0x2f4/0x840
[  975.620887][T16691]  ? dev_hard_start_xmit+0x186/0x440
[  975.626220][T16691]  ? __dev_queue_xmit+0x2104/0x3290
[  975.631471][T16691]  ? dev_queue_xmit+0x4b/0x60
[  975.636198][T16691]  ? __bpf_redirect+0x15f0/0x1840
[  975.641274][T16691]  ? bpf_clone_redirect+0x4a5/0x660
[  975.646517][T16691]  ? ___bpf_prog_run+0x92d/0xb420
[  975.651593][T16691]  ? __bpf_prog_run512+0x121/0x180
[  975.656755][T16691]  ? bpf_test_run+0x762/0x1040
[  975.661551][T16691]  ? bpf_prog_test_run_skb+0x15c9/0x2100
[  975.667222][T16691]  ? bpf_prog_test_run+0x784/0x820
[  975.672370][T16691]  ? __sys_bpf+0xada/0x1230
[  975.676901][T16691]  ? __ia32_sys_bpf+0xe1/0x130
[  975.681692][T16691]  ? __do_fast_syscall_32+0x96/0xf0
[  975.686933][T16691]  ? do_fast_syscall_32+0x34/0x70
[  975.691994][T16691]  ? do_SYSENTER_32+0x1b/0x20
[  975.696710][T16691]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  975.703262][T16691]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  975.709811][T16691]  ? arch_stack_walk+0x291/0x3c0
[  975.714783][T16691]  ? stack_trace_save+0x1a0/0x1a0
[  975.719847][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.725002][T16691]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  975.730855][T16691]  ? br_allowed_ingress+0x199/0x1b30
[  975.736271][T16691]  ? skb_pull+0x26f/0x290
[  975.740643][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.745810][T16691]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  975.751660][T16691]  __msan_warning+0xb8/0x130
[  975.756291][T16691]  br_dev_xmit+0x8eb/0x1f60
[  975.760863][T16691]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  975.766713][T16691]  ? br_net_exit+0x250/0x250
[  975.771349][T16691]  xmit_one+0x2f4/0x840
[  975.775558][T16691]  dev_hard_start_xmit+0x186/0x440
[  975.780725][T16691]  __dev_queue_xmit+0x2104/0x3290
[  975.785797][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.790952][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.796111][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.801267][T16691]  dev_queue_xmit+0x4b/0x60
[  975.805817][T16691]  __bpf_redirect+0x15f0/0x1840
[  975.810717][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.815875][T16691]  bpf_clone_redirect+0x4a5/0x660
[  975.820959][T16691]  ___bpf_prog_run+0x92d/0xb420
[  975.825860][T16691]  ? bpf_csum_level+0x7b0/0x7b0
[  975.830761][T16691]  __bpf_prog_run512+0x121/0x180
[  975.835752][T16691]  ? finish_task_switch+0x42f/0xad0
[  975.840988][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.846137][T16691]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  975.851995][T16691]  ? ktime_get+0x36b/0x450
[  975.856443][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.861595][T16691]  ? kmsan_get_shadow_origin_ptr+0x9b/0xf0
[  975.867447][T16691]  ? bpf_test_timer_continue+0x7c0/0x830
[  975.873119][T16691]  ? kmsan_get_metadata+0x52/0x220
[  975.878367][T16691]  ? __bpf_prog_run480+0x180/0x180
[  975.883537][T16691]  ? __bpf_prog_run480+0x180/0x180
[  975.888691][T16691]  bpf_test_run+0x762/0x1040
[  975.893339][T16691]  bpf_prog_test_run_skb+0x15c9/0x2100
[  975.898865][T16691]  ? __bpf_prog_test_run_raw_tp+0x3a0/0x3a0
[  975.904797][T16691]  bpf_prog_test_run+0x784/0x820
[  975.909781][T16691]  __sys_bpf+0xada/0x1230
[  975.914146][T16691]  ? kmsan_get_metadata+0x33/0x220
[  975.919311][T16691]  __ia32_sys_bpf+0xe1/0x130
[  975.923945][T16691]  __do_fast_syscall_32+0x96/0xf0
[  975.929013][T16691]  do_fast_syscall_32+0x34/0x70
[  975.933909][T16691]  do_SYSENTER_32+0x1b/0x20
[  975.938538][T16691]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  975.944909][T16691] RIP: 0023:0xf6e70549
[  975.948992][T16691] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  975.968634][T16691] RSP: 002b:00000000f586a5bc EFLAGS: 00000296 ORIG_RAX: 0000000000000165
[  975.977076][T16691] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200000c0
[  975.985068][T16691] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  975.993054][T16691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  976.001042][T16691] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  976.009030][T16691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  976.017032][T16691]  </TASK>
[  976.020299][T16691] Kernel Offset: disabled
[  976.024632][T16691] Rebooting in 86400 seconds..